Exposing Emotet's Modern Infrastructure - A Case Study on Tracking Down and Shutting Down Abusive Malware In Direct Cooperation with Abuse Departments

In this post I'll officially attempt to bring down and take offline the Emotet botnet including to actually provide never-published before OSINT type of research analysis on the actual C&C infrastructure behind the Emotet botnet which is one of the most prolific botnets up to present day with the idea to attempt a coordinated take down attempt in direct cooperation with multiple international ISPs and their associated abuse departments for the purpose of bringing it offline.

Sample Emotet known C&C infrastructure servers:

hxxp://109.123.78.10

hxxp://66.54.51.172

hxxp://108.161.128.103

hxxp://195.210.29.237

hxxp://5.35.249.46

hxxp://5.159.57.195

hxxp://206.210.70.175

hxxp://88.80.187.139

hxxp://188.93.174.136

hxxp://130.133.3.7

hxxp://162.144.79.192

hxxp://79.110.90.207

hxxp://72.18.204.17

hxxp://212.129.13.110

hxxp://66.228.61.248

hxxp://193.171.152.53

hxxp://129.187.254.237

hxxp://178.248.200.118

hxxp://133.242.19.182

hxxp://195.154.243.237

hxxp://80.237.133.77

hxxp://158.255.238.163

hxxp://91.198.174.192

hxxp://46.105.236.18

hxxp://205.186.139.105

hxxp://72.10.49.117

hxxp://133.242.54.221

hxxp://198.1.66.98

hxxp://148.251.11.107

hxxp://213.208.154.110

hxxp://192.163.245.236

hxxp://88.80.189.50

hxxp://185.46.55.88

hxxp://173.255.248.34

hxxp://104.219.55.50

hxxp://200.159.128.19

hxxp://198.23.78.98

hxxp://70.32.92.133

hxxp://192.163.253.154

hxxp://192.138.21.214

hxxp://106.187.103.213

hxxp://162.144.80.214

hxxp://128.199.214.100

hxxp://69.167.152.111

hxxp://46.214.107.142

hxxp://195.154.176.172

hxxp://106.186.17.24

hxxp://74.207.247.144

hxxp://209.250.6.60

hxxp://142.34.138.90

hxxp://74.217.254.29

hxxp://212.48.85.224

hxxp://167.216.129.13

hxxp://91.194.151.38

hxxp://162.42.207.58

hxxp://104.28.17.67

hxxp://8.247.6.134

hxxp://5.9.189.24

hxxp://78.129.213.41

hxxp://184.86.225.91

hxxp://107.189.160.196

hxxp://88.208.193.123

hxxp://50.56.135.44

hxxp://184.106.3.194

hxxp://185.31.17.144

hxxp://67.19.105.107

hxxp://218.185.224.231

Including the following C&C infrastructure servers part of Emotet's C&C infrastructure:

103.201.150.209

104.131.11.150

104.131.208.175

104.236.151.95

104.236.246.93

104.236.99.225

105.224.171.102

109.104.79.48

109.73.52.242

111.67.12.221

112.72.9.242

115.124.109.85

115.71.233.127

117.218.133.244

125.99.106.226

125.99.61.162

128.199.78.227

134.196.209.126

136.243.177.26

138.201.140.110

138.219.214.164

138.68.106.4

142.4.198.249

142.93.88.16

144.139.247.220

147.135.210.39

149.62.173.247

159.203.204.126

159.65.241.220

159.65.25.128

162.144.119.216

162.217.250.243

162.243.125.212

167.114.210.191

169.239.182.217

170.247.122.37

173.212.203.26

174.136.14.100

175.100.138.82

176.250.213.131

176.31.200.136

177.242.214.30

177.246.193.139

178.62.37.188

178.79.161.166

178.79.163.131

179.14.2.75

179.32.19.219

179.40.105.76

181.134.105.191

181.15.180.140

181.15.243.22

181.16.127.226

181.171.118.19

181.189.213.231

181.198.67.178

181.231.72.200

181.28.144.64

181.28.248.205

181.39.134.122

181.48.174.242

183.82.97.25

185.129.93.140

185.86.148.222

185.94.252.27

186.138.56.183

186.144.64.31

186.22.209.16

186.23.146.42

186.23.18.211

186.4.167.166

186.4.234.27

186.83.133.253

186.86.177.193

187.149.41.205

187.163.180.243

187.163.222.244

187.178.9.19

187.188.166.192

187.189.195.208

187.242.204.142

188.166.253.46

189.180.84.115

189.196.140.187

189.209.217.49

190.1.37.125

190.102.226.91

190.112.228.47

190.113.233.4

190.117.206.153

190.145.67.134

190.147.12.71

190.186.203.55

190.186.221.50

190.189.112.116

190.189.204.100

190.19.42.131

190.193.131.141

190.230.60.129

190.246.166.217

190.25.255.98

190.36.88.98

190.55.39.215

190.72.136.214

190.97.10.198

191.97.116.232

195.242.117.231

196.6.112.70

197.211.244.6

198.58.114.91

200.107.105.16

200.123.101.90

200.24.248.206

200.28.131.215

200.32.61.210

200.43.231.10

200.57.102.71

200.58.171.51

200.58.83.179

200.80.198.34

200.85.46.122

201.199.89.223

201.212.24.6

201.219.183.243

201.220.152.101

201.231.44.78

201.238.152.20

201.251.229.37

201.252.229.169

202.83.16.150

203.25.159.3

205.186.154.130

206.189.98.125

211.63.71.72

212.71.234.16

213.120.104.180

216.98.148.136

216.98.148.156

217.113.27.158

217.13.106.160

217.92.171.167

219.74.237.49

222.214.218.136

222.214.218.192

225.153.252.228

77.122.183.203

109.123.78.10

66.54.51.172

108.161.128.103

195.210.29.237

5.35.249.46

5.159.57.195

206.210.70.175

88.80.187.139

188.93.174.136

130.133.3.7

162.144.79.192

79.110.90.207

72.18.204.17

212.129.13.110

66.228.61.248

193.171.152.53

129.187.254.237

178.248.200.118

133.242.19.182

195.154.243.237

80.237.133.77

158.255.238.163

91.198.174.192

46.105.236.18

205.186.139.105

72.10.49.117

133.242.54.221

198.1.66.98

148.251.11.107

213.208.154.110

192.163.245.236

88.80.189.50

185.46.55.88

173.255.248.34

104.219.55.50

200.159.128.19

198.23.78.98

70.32.92.133

192.163.253.154

192.138.21.214

106.187.103.213

162.144.80.214

128.199.214.100

69.167.152.111

46.214.107.142

195.154.176.172

106.186.17.24

74.207.247.144

209.250.6.60

142.34.138.90

74.217.254.29

212.48.85.224

167.216.129.13

91.194.151.38

162.42.207.58

104.28.17.67

8.247.6.134

5.9.189.24

78.129.213.41

184.86.225.91

107.189.160.196

88.208.193.123

50.56.135.44

184.106.3.194

185.31.17.144

67.19.105.107

218.185.224.231

Sample actionable intelligence on Emotet's C&C infrastructure:

Abuse Departments Primary Contact Points Involved in this Take Down Campaign Include:

noc@premianet.com

eig-abuse@endurance.com

cschelp@gov.bc.ca

complaints@cari.net

abuse@youbroadband.in

abuse@websupport.sk

abuse@webfusion.com

abuse@vps.net

abuse@trueinternet.co.th

abuse@tpnet.co.nz

abuse@telstra.net

abuse@telkomsa.net

abuse@tektonic.net

abuse@softlayer.com

abuse@skymedia.mn

abuse@sky.uk

abuse@rackspace.com

abuse@ovh.net

abuse@ovh.ca

abuse@nextlayer.at

abuse@netnames.com

abuse@mediatemple.net

abuse@lrz.de

abuse@liquidweb.com

abuse@linode.com

abuse@hetzner.com

abuse@hathway.net

abuse@fu-berlin.de

abuse@fasthosts.co.uk

abuse@expedient.com

abuse@dxc.com

abuse@dion.ne.jp

abuse@digitalocean.com

abuse@contabo.de

abuse@cloudflare.com

abuse@btopenworld.com

abuse@bluehost.com

abuse@atlantic.net

abuse@as47195.net

abuse@akamai.com

abuse@actcorp.in

abuse@123-reg.co.uk

sainfo@netsuite.com

support@premianet.com

noc@inap.com

noc@cybertrails.net

ipaddressing@level3.com

info@mellowhost.com

ipadmin@gov.bc.ca

network@cari.net

admin@armourcloud.io

gr.sridhar@youbroadband.co.in

info@websupport.sk

abuse@uk2group.com

ipadmin@trueinternet.co.th

tim@initech.co.nz

addressing@telstra.net

pieter@saix.net

abuse@telekom.de

matta@tektonic.net

abuse@ta.telecom.com.ar

ipadmin@softlayer.com

curtis1977@us.ibm.com

soyoloo@skymedia.mn

hostmaster@sky.uk

abuse@rapidswitch.com

hostmaster@rackspace.com

noc@ovh.net

abuse@online.net

ripe@online.net

noc@nextlayer.at

sys-ripe@netnames.com

dnsadmin@mediatemple.net

ipadmin@lrz.de

ipadmin@liquidweb.com

support@linode.com

abuse@hostturka.com

abuse@hostopia.com.au

ripe@hetzner.com

abuse@hekko.pl

vijaym@hathway.net

admin-c@fu-berlin.de

networks@fasthosts.com

ipm@expedient.com

abuse@esds.co.in

ipaddr@dxc.com

rir@cloudflare.com

btretail.ipam@bt.com

eig-net-team@endurance.com

eig-noc@endurance.com

ip-admin@atlantic.net

noc@as47195.net

ip-admin@akamai.com

tech.support@incredible.actcorp.in

ip-admin@actcorp.in

ripe@webfusion.com

sknetwork2012@gmail.com

hostmaster@twl-kom.de

idc_sales@daou.co.kr

hostmaster@bsnl.in

alejandro@patagoniadata.com.ar

jpinazo@axarnet.es

hello@syn.one

operations@hostafrica.co.za

nestorbonfante66@gmail.com

nic_tech@megacable.com.mx

ipadmin@tigo.com.co

admin.internet.co@telefonica.com

tasamail.ar@telefonica.com

adminternet@une.net.co

noc@megaservers.de

wimpie@letaba.net

andrew.alston@liquidtelecom.com

domains@send.itto.us

tech@duruan.co.kr

albert@web.am

pda@1b.hu

hostmaster@singnet.com.sg

anti-spam@ns.chinanet.cn.net

avmc@ctvnet.dp.ua

d.pastian@terralink.de

claude.demuth@lu-cix.lu

scharwitzl@bmlv.gv.at

bz@giganet.hu

mass-ripe@heg.com

noc@wikimedia.org

hostmaster@nic.ad.jp

noc@digitalocean.com

noc@next-gen.ro

rir-admin@fastly.com

Sample hostnames acting as Emotet C&C infrastructure servers:

zabbix-sakura2.anthill.jp

www.zedat.fu-berlin.de

www.snowmobile.gov.bc.ca

www.netdoktor.at

www.cceca.ca

www.bmlv.gv.at

www-riedle.transfermarkt.de

wp308.webpack.hosteurope.de

vps.cournoyer17.info

vmh17370.hosting24.com.au

vmd61678.contaboserver.net

universidadedoingles.com.br

twojj.com

trc-200-107-105-16.trcnet.com.ar

text-lb.esams.wikimedia.org

testwerk.org

static.bb.ahd.117.218.133.244.bsnl.in

static.24.189.9.5.clients.your-server.de

static.110.140.201.138.clients.your-server.de

static.107.11.251.148.clients.your-server.de

static-ip-cr1901471271.cable.net.co

static-ip-cablemodem-190.186.221.50.cotas.com.bo

static-ip-cablemodem-190.186.203.55.cotas.com.bo

static-ip-adsl-200.58.171.51.cotas.com.bo

static-200-58-83-179.supernet.com.bo

static-190-25-255-98.static.etb.net.co

snaplive.org

shopping.netsuite.com

server90240.uk2net.com

server88-208-193-123.live-servers.net

server.driveclassic.com

sapper.ethii.com

rtw7-rfpn.accessdomain.com

rs250366.rs.hosteurope.de

roadbikesales.com.au

rmolina.mx

rb2.leevee.it

popdesigngroup.com

pd95caba7.dip0.t-ipconnect.de

ovz06.gamesdom.com

ny-1.robbiebyrd.com

ns2.hospemex.com

ns2.datatrust.com.br

niotek.vservers.es

mail2.rhubarb-cs.com

mail.ps4hacked.es

mail.behaplastik.com

lvps109-104-79-48.vps.webfusion.co.uk

li89-144.members.linode.com

li695-139.members.linode.com

li616-91.members.linode.com

li318-248.members.linode.com

li301-131.members.linode.com

li299-166.members.linode.com

lasvegas-nv-datacenter.com

israel-studies.com

ip.77.122.183.203.dynamic.krr.volia.net

host90.200-123-101.static.telmex.net.ar

host37.170-247-122.netacebal.com.ar

host233-004.vccfranck.com.ar

host22.181-15-243.telecom.net.ar

host213-120-104-180.in-addr.btopenworld.com

host190.102.226.91.dynamic.pacificonet.cl

host181-189-213-231.wilnet.com.ar

host169.201-252-229.telecom.net.ar

host140.181-15-180.telecom.net.ar

host129.190-230-60.telecom.net.ar

host.thehiddencollective.com

host-186-4-234-27.netlife.ec

host-186-4-167-166.netlife.ec

host-181-16-127-226.telered.com.ar

hirlevel.uniweb.hu

hh4.secureserver.net.nz

h2041.gfsrv.net

gbg1.0x0.network

fixed-187-189-195-208.totalplay.net

enterprise.hellokrd.net

dynamic-ip-18686177193.cable.net.co

dynamic-ip-18683133253.cable.net.co

dynamic-ip-1861446431.cable.net.co

dsrecordings.com

dsl-189-180-84-115-dyn.prod-infinitum.com.mx

dsl-187-149-41-205-dyn.prod-infinitum.com.mx

dmj.southo.net

dinamic-tigo-179-14-2-75.tigo.com.co

customer.megaservers.de

customer-tgz-204-142.megared.net.mx

customer-smal-140-187.megared.net.mx

customer-qro-214-30.megared.net.mx

customer-col-193-139.megared.net.mx

customer-201-219-183-243.megacable.com.ar

cpe-190-55-39-215.telecentro-reversos.com.ar

cpe-186-23-18-211.telecentro-reversos.com.ar

cpe-186-23-146-42.telecentro-reversos.com.ar

cpe-186-22-209-16.telecentro-reversos.com.ar

comadosa.mx

cm-134-196-209-126.revip18.asianet.co.th

cable-181-134-105-191.une.net.co

bscloud.vps.wbsprt.com

bsbdb01.bsb.lrz.de

broadband.actcorp.in

bcairquality.ca

bb219-74-237-49.singnet.com.sg

b0fad583.bb.sky.com

aol-dial-200-57-102-71.zone-0.ip.static-ftth.axtel.net.mx

act2028316150.broadband.actcorp.in

a184-86-225-91.deploy.static.akamaitechnologies.com

82-138-100-175.static.youbroadband.in

78-44-231-201.fibertel.com.ar

64-144-28-181.fibertel.com.ar

62.4e.17c6.ip4.static.sl-reverse.com

505139.vps-10.com

46-214-107-142.next-gen.ro

40-24-mail.arylump.net

39.ip-147-135-210.eu

368940.customer.zol.co.zw

217-166-246-190.fibertel.com.ar

212-129-13-110.rev.poneytelecom.eu

210.advance.com.ar

205-248-28-181.fibertel.com.ar

201-251-229-37.mrse.com.ar

201-212-24-6.cab.prima.net.ar

200.80.198.34.static.techtelnet.net

200-72-231-181.cab.prima.com.ar

200-28-131-215.baf.movistar.cl

200-159-128-19.winfnet.com.br

20.201-238-152.etapanet.net

198-1-66-98.unifiedlayer.com

195-154-243-237.rev.poneytelecom.eu

195-154-176-172.rev.poneytelecom.eu

192.218.214.222.broad.ab.sc.dynamic.163data.com.cn

192-163-253-154.unifiedlayer.com

192-163-245-236.unifiedlayer.com

190-97-10-198.bvconline.com.ar

190-72-136-214.dyn.dsl.cantv.net

190-36-88-98.dyn.dsl.cantv.net

190-1-37-125.bvconline.com.ar

19-118-171-181.fibertel.com.ar

189-209-217-49.static.axtel.net

187-178-9-19.dynamic.axtel.net

187-163-222-244.static.axtel.net

187-163-180-243.static.axtel.net

183-56-138-186.fibertel.com.ar

179-40-105-76.mrse.com.ar

164.214.219.138.dynamic.grupoequis.com.ar

162-144-80-214.unifiedlayer.com

162-144-79-192.unifiedlayer.com

162-144-119-216.unifiedlayer.com

141-131-193-190.cab.prima.net.ar

136.218.214.222.broad.ab.sc.dynamic.163data.com.cn

131-42-19-190.fibertel.com.ar

116-112-189-190.cab.prima.net.ar

105-224-171-102.south.dsl.telkomsa.net

101.152.220.201.itc.com.ar

100-204-189-190.cab.prima.net.ar

Stay tuned!

Continue reading →

Threat Intelligence - An Adaptive Approach to Information Security - Free Consultation Available

Dear, blog, readers, as, of, today, I'm, making, publicly, available, my, portfolio, of, services, including, active, threat, intelligence, gathering, and, processing, cybercriminals, and, network, assets, profiling, real, life, personalization, of, malicious, actors, OSINT, analyses, in-depth, understanding, and, processing, of, tactics, techniques, and, procedures (TTPs), including, the, production, of, custom, timely, and, relevant, managed, or, on, demand, client-tailored, reports, and, analysis, briefs, covering, managed, security, blogging, and, conference, attendance, cybercrime, malware, botnets, and, threat, intelligence, including, the, coverage, of, geopolitically, relevant, cyber, threat, assessments.

The, portfolio, of, services, includes, but, is, not, limited, to:

Real-time, managed, or, on, demand, analysis, briefs, and, reports, production:
- analysis, briefs, and, timely, and, relevant, reports, covering, cybercrime, malware, botnets, and, threat, intelligence, including, but, not, limited, to, tactics, techniques, and, procedures (TTPs), real, life, personalization, of, cybercriminals, and, network, assets

Geopolitically, relevant, and, geographically, selected, threat, intelligence, processing, and, gathering, relevant, reports:
- geopolitically, relevant, coverage, of, selected, geographic, regions, covering, cybercrime, malware, botnets, and, threat, intelligence, including, but, limited, to, tactics, techniques, and, procedures (TTPs), real, life, personalization, of, cybercriminals, and, network assets

Managed, security, blogging, and, presentation, conference, attendance:
- threat, intelligence, processing, as, a, service, including, but, not, limited, to, the, managed, processing, and, communication, of, threat, intelligence, gathering, and, processing, information, in, the, form, of, managed, communication, to, a, selected, set, of, audiences, including, but, not, limited, to, security, blogging, and, conferences, attendance, on, behalf, of, a, selected, enterprise, further, positioning, its, understanding, and, reaching, out, to, selected, clients

Managed, tactics, techniques, and, procedures (TTPs), processing, managing, and, gathering, analysis, and, reports:
- in-depth, understanding, of, tactics, techniques, and, procesures (TTPs), relevant, to, a, specific, cybercrime, group, geopolitically, relevant, region, or, a, selected, geographically, relevant, region

Approach me at dancho.danchev@hush.com

Enjoy!

Continue reading →

Dancho Danchev's Threat Data - How to Request Free Access Including a Christmas Discount

Dear blog readers, I wanted to let everyone know that I'm currently offering unlimited and exclusive access to Threat Data - The World's Most Comprehensive Threats Database in the true spirit of the Christmas seasons to selected set of individuals and organizations that approach me at dancho.danchev@hush.com

Key Summary Points:
- the platform basically represents the majority of proprietary Threat Intelligence type of research that I produce on a daily basis
- the platform is properly populated on a daily basis with a variety of proprietary Threat Intelligence type of research data, IoCs (Indicators of Compromise) and hundreds of enriched Tactics Techniques and Procedures including proprietary OSINT analysis and research to help you and your organization stay on the top of its game and to ensure that your organization's infrastructure and situational awareness remains ahead of the cybercriminals and competition that affect your organization's infrastructure
- the portfolio of covered verticals include -  Malware Campaigns, Phishing Campaigns, Spam Campaigns, IM Malware Campaigns, Social Media Malware Campaigns, Mobile Malware Campaigns, Mac OS X Malware Campaigns, Blackhat SEO Campaigns, Fraud, Pharmaceutical Scams, Money Mule Recruitment, Reshipping Mule Recruitment, Malvertising Campaigns, Ransomware, Scareware

In case you're interested in obtaining free access to the service including a possible commercial partnership including a possible high-volume Christmas season discount - feel free to approach me with the following information.

01. Your Name
02. Your Position
03. How long have you been reading my blog?
04. How has my blog helped you achieve your career goals?
05. The primary reason for requesting access?
06. How much would you or your organization be willing to invest in order to obtain access to the service?

Looking forward to receiving your access request including possible discount-based Christmas season type of commercial partnership requests at dancho.danchev@hush.com

Stay tuned! Continue reading →

Dancho Danchev's Blog - Open Call for Blog Contributors and Guest Bloggers

UPDATE: Do you know which is one of the World's most popular Security blogs and who's running it? 

Guess what - you've been reading it all along. Ever since I started this blog in December, 2005 for the purpose of impressing my girlfriend and greatly inspired by a successful venture with Astalavista Security Group circa 2003-2006 I've received over 5M page views courtesy of a loyal base of users to whom I owe a great debt of gratitude for keeping track of my research and following my comments - in real-time. The time has come to expand and eventually launch a new set of products and services including a possible Advertising Inventory - therefore I've decided to launch an Open Call for Blog Contributors including Guest Bloggers. Interested in writing at this blog? Feel free to approach me - dancho.danchev@hush.com

Dancho Danchev's Blog - Major Security Web Property Statistics:

Dear blog readers, friends, partners, colleagues, Security Industry friends and partners including U.S Intelligence Community and U.S and International Law Enforcement friends and partners - it's been a decade since I originally decided to launch this blog positioning it as a top Security and Threat Intelligence including Cybercrime Research Major Web Property attracting thousands of high-profile and loyal users throughout the decade to whom I owe a great deal of personal thanks and admiration for following me and supporting my research and personal opinion throughout the years including the active spreading of high-quality and never-published before OSINT analysis cybercrime and threat intelligence gathering type of technical analysis.

In the spirit of offering high-quality research and malicious and fraudulent campaign analysis including the expansion of my personal blog to include a diverse set of new areas including a possible Advertising Inventory to offer to selected and invite-only vendors and organizations - I've decided to make an Open Call for Blog Contributors and Guest Bloggers with the idea to keep the spirit of my 2008-2013 series of analysis where I was busy dominating the news with new attack vectors and attacks techniques including the profiling and tracking down of new malware and cybercrime groups.

Interested in writing at this blog? Do you have a lot to say in the area of cybercrime research and Threat Intelligence including Privacy Anonymity and malicious software including botnets? Keep reading.

Who's Welcome to Approach me?

• Academic Institutions looking for ways to properly promote their research and content by offering a selected individuals who'd be responsible for offering an in-depth never published before perspective on the Institution's cybercrime and malicious software research perspective
• Threat Intelligence Vendors looking for ways to approach a new set of loyal user base and to promote their research products and services by appointing a selected individual who would be interested in communicating Key Vendor findings on a daily basis
• Independent Freelancers looking to reach out to a loyal user base and receive the necessary expose in terms of having their article read by thousands of loyal and selected users on a daily basis
• Friends and Colleagues with whom I've worked in the past or with who I continue to work nowadays who might be interested in making a valuable contributing to this high-quality Web property publication

Interested in writing at this blog? Do you want to make a valuable contribution? Feel free to approach me dancho.danchev@hush.com and I'll get back to you with proper access as soon as possible.

Continue reading →

Guess Who's Still Running the Show?

Dear blog readers,

I've recently came across to a very informative presentation courtesy of a friend Jeffrey Carr from TaiaGlobal that lists me as a major competitor in Cyber Threat Intelligence next to the DHS. Outstanding! Keep it coming Jeff and don't forget to check out this post detailing the inner workings of the infamous Kneber Botnet.

How to set them straight? Stay tuned!

Continue reading →

Anyone Using XMPP/OMEMO?

Dear blog readers,

Are you interested in catching up with me in terms of current and upcoming research including possible cybercrime research and commercial threat intelligence gathering services?

Here's my XMPP/OMEMO ID: dancho.danchev@kode.im

Stay tuned! Continue reading →

The Armadillo Phone - A Security Review

Dear blog readers,

As many of you know I've joined forces with Team Armadillo Phone in the fight against cybercriminals including nation-state and rogue and malicious including possibly fraudulent cyber adversaries for the position of Security Blogger in 2019 and I wanted to say big thanks to COO Rob Chaboyer and CEO Kelaghn Noy for bringing me on board and for initiating a series of video conversations to better help them understand my motivation for joining the company and what exactly I can bring on board.

Among my first responsibilities were to possibly include an actual Security Audit and actual Security Advice and Recommendation including practical implementation advice on new Privacy and Security themed related features actual reaching out to current and future customers including active posting of new and innovative Security Research at the company's blog.

In this post I'll provide an in-depth Security Review of the Armadillo Phone in terms of Privacy and Security features including their relevance and importance in today's modern cyber threat adversaries dominated Internet-based communication ecosystem including an in-depth introduction into some of the key features that I might be definitely looking forward to implementing and offering practical advice on in terms of new Privacy and Security features that might greatly assist new and future customers on their way to achieve a decent degree of Privacy and Security in their Internet-based communications.

Key Features of the Device include:

- Tamper-Resistant Packing
- Device Inspection
- Secure Hardware
- Multiple Passwords
- Zero Day Protection
- Security Peripherals

Among my key proposals that I sincerely hope will eventually make their place on COO Rob Chaboyer and CEO Kelaghn Noy's desk are:

• Security Researcher Working Space or a Security Module - the basic idea here would be to offer a built-in full-disclosure reader application including automatic subscription to major and popular Information Security and Hacking Mailing Lists.
• Built-in RSS Reader - the main idea here would be offer Armadillo Phone users to ability to take advantage of a built-in RSS reader with pre-defined set of major and high-profile Security and Provicacy Content Providers
• Security and Privacy Including National-Security Journalists' Opt-In Directory - have you ever wanted to directly reach out to a high-profile Security Privacy or National Security type of journalist for the purpose of sharing with them your opinion on a particular piece of to actually share a news tip? This is the main purpose behind this particular feature.
• Covert Channels - the main purpose behind this features is to allow Armadillo Phone users in particular journalists or hacktivists the opportunity to secure and convertly transmit information that's basically impossible to track down intercept
• Steganography - the main purpose behind this feature is to allow Armadillo Phone users with the opportunity to use an alternative secure communication channel that's basically impossible to intercept track down and censor

Key Security and Privacy Features of the Device include:

• AES-256-XTS block-level FDE
• Block-level FDE instead of Android's file-based encryption
• Scrypt work factors increased
• Minimum 8-character alphanumeric password
• Completely software-based
• Keymaster and gatekeeper disabled
• Normal password for deniable encryption
• Secret password stored at randomized offset
• Secret volume is hidden inside unused portion of decoy data
• Wipe password in footer to erase device
• Separate lockscreen password
• Password verification order randomized at runtime to prevent timing attacks 
• Enhanced KASLR and userland ASLR
• Increased ASLR entropy
• Several PaX patches ported
• Zygote uses exec() spawning instead of fork()
• Improved SELinux rules
• Hardened malloc implementation
• Stack and heap canaries detect overflows
• Enhanced FORTIFY_SOURCE implementation
• Function pointer protection
• Restrictive compile-time sanitization
• Additional attack surface reduction
• All connections made using pinned TLS 1.2 connections with high-entropy 4096-bit certificates
• Metadata can be further protected by enabling optional VPN
• Verify encryption keys using manual verification, QR code, SMP or NFC
• Chat uses OMEMO encryption
• Email uses PGP encryption
• Email uses randomized subjects
• Email uses encrypted connection to keyserver and mailserver
• Email requires 4096-bit PGP keys
• Radio Sentinel: Monitors WiFi networks for ARP poisoning. Monitors cellular networks for 2G networks, performs sanity checks and compares cellular towers to a database of known network
• RAM Sentinel: Monitors temperature to prevent cold-boot attacks
• Theft Sentinel: Connects to anti-theft beacon over BLE, alarms both beacon and phone if disconnected. If phone isn't unlocked or beacon isn't reconnected within 5 minutes the phone will shutdown. 

Based on my current experience with the device which I've recently started using for the purpose of keeping in touch with friends and colleagues I can easily say that this is one of the most advanced and technically sophisticated mobile security device that can be easily obtained from here and I sincerely hope that my research and security knowledge and technical knowledge expertise will prove highly valuable to what the Team at Armadillo Phone are currently doing.

Stay tuned!

Continue reading →

Joining Team Armadillo Phone!

Dear blog readers,

It's a pleasure and an honor to let you know that I've recently joined forces with Team Armadillo Phone in the fight against sophisticated nation-state and rogue cyber threat actors for the position of Security Blogger targeting mobile devices on their way to compromise sensitive and often classified personal information and that I'll be definitely looking forward to making impact with the company through the publication of high-quality security and cyber threat research including the active education and spreading of information and knowledge to the company's clients on their way to further protect their sensitive and often classified data from mobile threats courtesy of a multi-tude of malicious and fraudulent adversaries.

Among my responsibilities will include active cyber threat an nation and rogue cyber adversary research including actual client outreach in terms of Security Blogger including the actual work and eventual implementation of new never-published and seen-before privacy and security features including the actual Security Audit of the device in terms of possible Threat Modelling flaws and actual practical solution and advice-oriented implementation of new privacy and security features next to the usual cyber nation-state and rogue cyber actor type of threat analysis and research that I've been doing throughout the past decade.

Perfect timing to say big thanks to COO Rob Chaboyer and CEO Kelaghn Noy for bringing me on board and for actually taking the time and effort to go through my proposal and actually initiate a video conversation with me for the purpose of working together.

My initial idea would be reach out to the company's client-base in terms of possible security threats outreach including the active production of high-quality security and cyber adversary research targeting mobile devices at the company's blog including the production of a Threat Modelling Scenario Research Analysis which I intend to publish at the company's blog including an actual practical and solution-oriented Security Audit of the device next to the actual introduction of new privacy and security features.

I will be definitely looking forward to making an impact with the company and I'll be definitely looking forward to continue publishing the high-quality and never-published before type of research analysis at my personal blog. Continue reading →

ManTech Introduces Newly Lauched Cyber Security "Space Range" - An Analysis

Have you ever dreamed of launching an offensive cyber warfare payload from Space? Keep reading.

It appears that the newly launched ManTech's "Space Range" cyber security simulation is truly capable of offering a fully-realistic cyber security and information security simulation environment that's successfully capable of launching an offensive cyber warfare payload from Space potentially signalling the presence of a sophisticated offensive cyber warfare adversary that's truly capable of making an impact and causing havoc on a wide-spread scale.

"ManTech has embraced the challenge of identifying and capturing the unique threats and vulnerabilities in the space domain with our newest offering, the ManTech Space Range. Built upon the success of ACRE®, ManTech’s innovative and fully operational cyber range, we are expanding our robust, scalable and hyper-realistic range to encompass the unique requirements of a cyber infrastructure supporting a space enterprise. ManTech’s ACRE range and highly trained team of space and cyber professionals are unrivaled within the IC and DoD. Our offense-informed cyber defense is an integral part of how we replicate any space, ground and network environment at any classification level to tackle today’s toughest cyber threats. ManTech’s Space Range provides “the right stuff” for customers to train to defend America’s vital space enterprise from the ground up. Most importantly, ManTech’s Space Range provides leaders with the confidence that critical space communications, navigation and intelligence gathering capabilities will be available and reliable when needed most."

A logical question emerges - what does really constitute a cyber war from Space? ManTech's initiative and research in this area can truly prove valuable to U.S National Security including its client-base for the purpose of empowering them with the necessary "know-how" and operational capabilities to launch offensive cyber warfare campaigns from Space.

Stay tuned!

Continue reading →

Greetings from Bulgaria - 2019 - An Intelligence Analyst's Perspective

Anyone there?

In a savagery peasant-aria which can be best described as the country where crime is supposedly prolific based on psychotropic substances and a "newspaper" courtesy -- you wish you wish -- of the basement of "someone" that thought that the CIA is running the country thanks to a "described" but supposedly "pre-scribed" leader of the country - increasing the longevity of peasant-aria land to continue vomiting in the very nothing? Not fair my friend. It shouldn't be surprising that nothing is ever taking place at all.

Keep reading.

- Key Summary Points

• Do you know what TOR is?

• Are you "based" on the Intelligence?

Can you best describe Bulgarian Intelligence Services? Pretty simple. It's your father's ugly Intelligence book with a vibrator on it - namely - an apparatus.

• When did you first discover Facebook?

Let's spit and vomit and take a photo of it - isn't this fancy? Or shall we spank your digital existence based on the clustered irrelevance of your degraded social vomit? Dare to press a button once again and We Shall Prevail to the bottom of the irrelevant obfuscation of your dare existence? Not fancy.

• Do you know who Yavor Kolev is?

And since when did it became fashionable to know who Misho Mishov is? Think twice and feel free to skip these Congressional Hearings. 

• Do you have a career?

Do you "go" to work? Do you have a "career"? Can you make the difference? You wish.

• Are you heading to the airport? 

- Don't be in a hurry - there's a toilet.

Relocation and full-time cybercrime research security blogging and threat intelligence position proposals can be directed to dancho.danchev@hush.com

Stay tuned!

Continue reading →

Joining Team Astalavista.box.sk - Official Project Re-Launch - Join us Today!

 Dear blog readers,

I wanted to take the time and effort and let you know that I've officially joined forces with Astalavista.box.sk which is the original Astalavista.box.sk search engine for hackers circa 1997 and which is one of the World's most popular Web sites for hackers and security experts where I'm currently acting as a Project Operator and where we've recently launched a high-profile and flagship search engine for hackers and security experts with the idea to make it publicly accessible and online for free potentially reaching out to thousands of loyal users across the globe on a daily basis which can be publicly accessed from the front page of the portal or from here including a flagship Dark Web search engine which can be accessed from the home page.

Currently running projects on the original Astalavista.box.sk include:

• Security and Hacking Forum
• Security Newsletter
• Crowd-funded Virtual Reality application for hackers and security experts
• Hacking and Security Blog

You can also browse the old version of the re-surrected portal here including the actual Call for Papers.  It's also a privilege and an honor to let you know that we're currently hiring and looking for possible full-time Team Members in a variety of categories where we intend to share some of the advertising revenue with current and upcoming Team Members.

You can also go through some of the following blog posts to catch up in terms of what we've been up to in terms of research:

• A Brief Introduction to the New Box.sk Project – or Who’s Dancho Danchev?
• Enter a Bold New World of Hacking and Security – Embrace the Cybertronics VR Platform for Hackers and Security Experts Today! We’re Hiring!
• Introducing Box.sk’s Flagship Hacking and Security Search Engine! We’re back!
• Announcing a New Hacking and Security Collaborative E-book Writing Initiative – Join Us Today!
• Announcing the Official Launch of Box.sk’s Hacking and Security IRC Network! Join Us Today!
• New Box.sk Online Security and Privacy Talk-Show featuring Dancho Danchev – Listen in Today!
• Announcing Dancho Danchev’s Exclusive Personal Hacking and Security Research Memoir – Free Copy Available!
• Announcing Box.sk’s World Hacker Global Domination Group (WHGDG) Call for Security and Privacy Papers and Call for Innovation
• Upcoming Box.sk High-Profile YouTube Livestream – The Scene and The Security Industry The Way We Know It – Bookmark the Link Today!
• Introducing Box.sk’s Flagship “Data Paradise” Old-School KGB-Style Dial-In Intranet

Stay tuned!

Continue reading →

Exposing Protonmail and Tutanota's Illicit Abuse by Ransomware Gangs - A Compilation of Currently Active Ransomware-Themed Email Addresses

UPDATE: ProtonMail and Tutanota removed all the accounts.

Dear blog readers,

I've recently decided to update and expand my original post on currently active email addresses used by ransomware gangs and DIY ransomware users with an additional set of Protonmail and Tutanota accounts which I believe should be taken offline as soon as possible in an attempt to disrupt the rogue and fraudulent operations currently run and managed by these groups and users.

Grab a copy of all the currently active Protonmail accounts used by ransomware gangs and lone DIY ransomware users from here including all the currently active Tutanota email accounts used by ransomware gangs from here including the complete and recently updated of all the publicly accessible email address accounts currently in circulation and used by ransomware gangs including DIY ransomware users from here.

Sample portfolio of currently active Protonmail accounts used by ransomware gangs and DIY ransomware users:

anony.killers@protonmail.com

avrahamblanck@protonmail.com

brazilian10@protonmail.com

business2018@protonmail.com

cashfalse777@protonmail.com

China2.0t@protonmail.com

gamebred812@protonmail.com

goodbuyer777@protonmail.com

goodc0der@protonmail.com

iamhiddenroot@protonmail.com

irc.priv8@protonmail.com

johnnada2018@protonmail.com

lider2018@protonmail.com

marksullivandata@protonmail.com

milanhendriks35@protonmail.com

murygroup@protonmail.com

premacz@protonmail.com

pry0cc@protonmail.com

reverzed@protonmail.com

sababa15@protonmail.com

sagatyk@protonmail.com

Secureworks0093@protonmail.com

sharkpoison@protonmail.com

sphelp23565@protonmail.com

tactical_toast@protonmail.com

tr4cefl0w@protonmail.com

vefinvlad18@protonmail.com

verb0@protonmail.com

aihlp@protonmail.com

servicedeskpay@protonmail.com

ooosferaplus@protonmail.com

debugs@protonmail.com

Vegas_MOZ6@protonmail.com

pepsi666@protonmail.com

deblans@protonmail.com

forestt@protonmail.com

heslo_1@protonmail.com

mp35@protonmail.com

skpayment@protonmail.com

skypayment@protonmail.com

bitcharity@protonmail.com

ctatmulfite@protonmail.com

bleeparity@protonmail.com

altairs35@protonmail.com

adm15@protonmail.com

mstr.hacker@protonmail.com

keeky@protonmail.com

thebest777@protonmail.ch

Harmahelp73@protonmail.com

vip76@protonmail.com

testfile1@protonmail.com

wang.chang.team.888@protonmail.com

MrRDX@protonmail.com

fooox1@protonmail.com

ooox1@protonmail.com

Panzergen552@protonmail.com

filesreturn247@protonmail.com

hidebak@protonmail.com

com-gloria@protonmail.com

upfileme@protonmail.com

cleverhorse@protonmail.com

Keta990@protonmail.com

Quantroei@protonmail.com

sailormorgan@protonmail.com

friends2019@protonmail.com

back_ins@protonmail.ch

bbitcrypt@protonmail.com

files2@protonmail.com

kickclakus@protonmail.com

decrypt.russ@protonmail.com

Hichkasam@protonmail.com

helpdiamond@protonmail.com

BrillianceBK@protonmail.com

LizardBkup@protonmail.com

decoderma@protonmail.com

missdecryptor@protonmail.com

VoidFiles@protonmail.com

Pentagon11@protonmail.com

guaranteedsupport@protonmail.com

decrypterfile@protonmail.com

rsaencrypt@protonmail.ch

burgeer@protonmail.ch

lrest0re@protonmail.com

nlrest0re@protonmail.com

nservo99@protonmail.com

nservo33@protonmail.com

Oktropys@protonmail.com

tr.pashra@protonmail.ch

delonethunder@protonmail.com

20.cashdashsentme@protonmail.com

20.coder007@protonmail.com

20.coronaVi2022@protonmail.ch

20Yourencrypter@protonmail.ch

der.Yourencrypter@protonmail.ch

20.supportfiless24@protonmail.ch

Olivier92747@protonmail.com

normanzak@protonmail.com

20.worcservice@protonmail.ch

20.aztecdecrypt@protonmail.com

CatSexy@protonmail.com

20Recuperadados@protonmail.com

teamv@protonmail.com

retourneren247@protonmail.com

e-DecryptFox@protonmail.com

frasesitliter1981@protonmail.com

ways.Yourencrypter@protonmail.ch

nemail2_zuza@protonmail.com

ndalailama2015@protonmail.ch

nVenisRansom@protonmail.com

nzikr@protonmail.com

nzikra@protonmail.com

nSanta-helper@protonmail.com

njschweiz@protonmail.ch

naes-ni@protonmail.com

nalka@protonmail.com

n0xc030@protonmail.ch

nTizer77234@protonmail.com

nFilegorilla1388@protonmail.com

nPec.clean@protonmail.com

natlantis_cf@protonmail.com

nExte2@protonmail.com

nunlckr@protonmail.com

nfbifine@protonmail.com

nerror03@protonmail.com

nEmpty003@protonmail.com

nx1881@protonmail.com

ndd.coala@protonmail.com

ncrypto7892@protonmail.com

nMastersRecovery@protonmail.com

ndie_yourself@protonmail.com

nsigrun_decryptor@protonmail.ch

nBackuppc@protonmail.com

nBackuppc1@protonmail.com

nDiskDoctor@protonmail.com

noktropys@protonmail.com

nj0ra@protonmail.com

nFilesreturn247@protonmail.com

nPabFox@protonmail.com

nMelisaPeterman@protonmail.com

ncrab7765@protonmail.com

ndecoder-help@protonmail.com

naperfectday2018@protonmail.com

nincognitoman@protonmail.com

nyougame@protonmail.ch

nibfosontsing@protonmail.com

nTerminator_123@protonmail.com

nnostro19@protonmail.com

ndecrypt0r-help@protonmail.com

ncrab1917@protonmail.com

nCottleAkela@protonmail.com

nnomoreletters@protonmail.ch

nservicedigilogos@protonmail.com

ncammora19@protonmail.com

ndarkusmbackup@protonmail.com

nRobSmithMba@protonmail.com

nbivisfiles@protonmail.com

nzoro4747@protonmail.com

nrecoverymydata@protonmail.com

nDecryptcn@protonmail.ch

nshelbyboom@protonmail.com

n0301192293@protonmail.com

ndatahelper@protonmail.com

neladovin1975@protonmail.com

nHelp557@protonmail.com

nyou.help5@protonmail.com

n4shadow@protonmail.com

ndawndec001@protonmail.com

nDecryptFs@protonmail.com

nlafoievologjanin123@protonmail.com

ndecoder83540@protonmail.com

nfile1@protonmail.com

naireyeric@protonmail.com

nellershaw.kiley@protonmail.com

nslanson_street8@protonmail.com

nParadiseconnect@protonmail.com

nzeoticus@protonmail.com

tbillwong73@protonmail.com

nasgardmaster5@protonmail.com

nfahydremu1981@protonmail.com

nbest666decoder@protonmail.com

nrazor2020@protonmail.ch

nvinilblind@protonmail.com

nmalieholtan@protonmail.com

nnormanzak@protonmail.com

ndec_restore@protonmail.com

uff1a52pojie_mail@protonmail.com

nSilentDeathDecryptor@protonmail.com

nOlivier92747@protonmail.com

nJamesBaker78@protonmail.com

nMayth24@protonmail.com

uff1aitunes_decrypt@protonmail.com

nAdamBrown89@protonmail.com

nFridaFarko@protonmail.com

nphrasitliter1981@protonmail.com

nguifullchartil1970@protonmail.com

nSidmouleux996@protonmail.com

CCD-help@protonmail.ch

yourfile2020@protonmail.com

saturndayc@protonmail.com

deloneThunder@protonmail.com

SmartDen@protonmail.com

encryptor2020@protonmail.com

n0pr0blems@protonmail.com

leakthemall@protonmail.com

fiasco911@protonmail.com

cryptonationusa@protonmail.com

andrey.taranov@protonmail.com

admincrypt@protonmail.com

help.me24@protonmail.com

symetrikk@protonmail.com

metron28@protonmail.com

decyourdata@protonmail.com

rans0me@protonmail.com

Unlock11@protonmail.com

erica2020@protonmail.com

777decoder777@protonmail.com

n777decoder777@protonmail.com

nAskHelp@protonmail.com

stevemartin777@protonmail.com

npr0t3eam@protonmail.com

anenerbex@protonmail.com

nanenerbex@protonmail.com

azor2020@protonmail.ch

Buddy888@protonmail.com

paymebtc@protonmail.com

backbigdata@protonmail.com

getdecoding@protonmail.com

recovery_server@protonmail.com

nrecovery_server@protonmail.com

recoverydbservice@protonmail.com

nrecoverydbservice@protonmail.com

n1rest0re@protonmail.com

nCobra_Locker@protonmail.com

nBatHelp@protonmail.com

nFolieloi@protonmail.com

nsuppdecrypt@protonmail.com

decryption1@protonmail.com

deccrypasia@protonmail.com

decrypt019@protonmail.com

diller13@protonmail.com

ndecrypt019@protonmail.com

decphob@protonmail.com

CryptoLocky_123456@protonmail.com

imperial755@protonmail.com

hitsbtc@protonmail.com

nRecoverybat@protonmail.com

geneve010@protonmail.com

geneve020@protonmail.com

ngeneve010@protonmail.com

ngeneve020@protonmail.com

GiveMeTheKey@protonmail.com

encryptor996@protonmail.com

ripntfs@protonmail.com

hlpp2@protonmail.com

nWuTang444@protonmail.com

nleakthemall@protonmail.com

lolyta_restore@protonmail.ch

decode.help@protonmail.ch

n0x69x@protonmail.com

nmiddleman2020@protonmail.com

greemsy.jj@protonmail.ch

ZiCoyote@protonmail.com

MarkTrue88@protonmail.com

myphoto.jpg.nefartanulo@protonmail.com

njamesgonzaleswork1972@protonmail.com

Deanlivermore@protonmail.com

nDeanlivermore@protonmail.com

repairhost1@protonmail.com

nrepairhost1@protonmail.com

nxvfxgw3929@protonmail.com

nalanson_street8@protonmail.com

nlambchristoffer@protonmail.com

qhrghghk@protonmail.com

nqhrghghk@protonmail.com

Ragnarok_master@protonmail.com

nRagnarok_master@protonmail.com

nunlockmeplease@protonmail.com

filedownload2020@protonmail.com

helpcov19@protonmail.com

black8201@protonmail.com

RDPrecovery1@protonmail.com

sifremicoz@protonmail.com

nDineshSchwartz1965@protonmail.com

nRupertMariner1958@protonmail.com

nStephanForenzzo1985@protonmail.com

SantaGman22@protonmail.com

nEdsonEpsok@protonmail.com

nAlfredhormund@protonmail.com

recoba90@protonmail.com

TomSoyer5@protonmail.com

reservedecryption@protonmail.com

TentwenUpper1@protonmail.com

locksvbox@protonmail.com

xtredboy@protonmail.com

Encryptedxtredboy@protonmail.com

addwe@protonmail.com

SupportC14@protonmail.ch

ReftuOne@protonmail.com

ransom12344@protonmail.com

nransom12344@protonmail.com

xmrlocker@protonmail.ch

nxmrlocker@protonmail.ch

zorab28@protonmail.com

zynoxion@protonmail.com

crossroads2371@protonmail.ch

mailsupp@protonmail.com

FridaFark@protonmail.com

Cryptofiles20202020@protonmail.com

TaiLung@protonmail.com

chine_jm@protonmail.ch

crptcloud@protonmail.ch

LaoXinWon@protonmail.com

tinxony@protonmail.com

veritablebee@protonmail.ch

corpseworm@protonmail.com

backmydata@protonmail.com

crioso@protonmail.com

recover13@protonmail.com

bucheck@protonmail.com

decrypttos@protonmail.com

EMAIL-MREncptor@protonmail.com

Ooosferaplus@protonmail.com

freefoams@protonmail.com

1_kill_yourself_1@protonmail.com

Look1213@protonmail.com

BTCBREWERY@protonmail.com

bitcharity@protonmail.com.com

deltatechit@protonmail.com

teamvi@protonmail.com

guifullcharti1970@protonmail.com

Reycarnasi1983@protonmail.com

XPReycarnasi1983@protonmail.com

Aztecdecrypt@protonmail.com

Cooolme@protonmail.com

Checkmail7@protonmail.com

Ssananunak1987@protonmail.com

Kromber@protonmail.com

tanoss@protonmail.ch

fedoremelianenko1976@protonmail.com

CharlstonParkwji@protonmail.com

zagrec@protonmail.com

teamvv@protonmail.com

recoverysql@protonmail.com

agent.dmr@protonmail.com

raynorzlol@protonmail.com

apoyo2019@protonmail.com

backcompanyfiles@protonmail.com

established01@protonmail.com

hjelp.main@protonmail.com

angry_war@protonmail.ch

cheet0s_de@protonmail.com

Pringls_us@protonmail.com

happy_sysadmin@protonmail.ch

anfreesextuo1982@protonmail.com

nanfreesextuo1982@protonmail.com

rsa1024rsa@protonmail.ch

pay4netwww@protonmail.com

GAmmA37@protonmail.ch

Bit-decrypt@protonmail.com

AleksanderEmelianenko@protonmail.com

cyberunionn@protonmail.com

MREncptor@protonmail.com

decryptsupport@protonmail.com

shine2@protonmail.com

recover_24_7@protonmail.com

neural.net2@protonmail.com

charlies9090@protonmail.com

cryptmanager@protonmail.com

remoteav@protonmail.ch

servo99@protonmail.com

servo33@protonmail.com

gtimph@protonmail.com

Steven77xx@protonmail.com

wecanhelp2@protonmail.com

y0000@protonmail.com

braln@protonmail.com

backuppc@protonmail.com

backuppc1@protonmail.com

decryptmystuff@protonmail.com

decrypthelpfiles@protonmail.com

executioner.update@protonmail.com

exte2@protonmail.com

file-spider@protonmail.ch

filefrozr@protonmail.com

1173022@protonmail.com

stysla@protonmail.com

hakbit@protonmail.com

egenexphi1988@protonmail.com

johnsonwhate@protonmail.com

CottleAkela@protonmail.com

walker18@protonmail.ch

solutionshelp@protonmail.com

edgar4000@protonmail.com

support-hack@protonmail.com

sicck@protonmail.com

Skull.and.bones2017@protonmail.com

simmyware@protonmail.ch

tbhranso@protonmail.com

fileb@protonmail.com

helpmegetfiles@protonmail.com

jokeroo@protonmail.com

grethen@protonmail.ch

luboversova148@protonmail.com

getwindows@protonmail.com

u2018grethen@protonmail.ch

u00a0coronaVi2022@protonmail.ch

u2018wannacry.decryptor_v4@protonmail.com

PedantBack@protonmail.com

abibo@protonmail.com

CryTekk@protonmail.com

sydney.wiley@protonmail.com

suupport@protonmail.com

serverup@protonmail.com

ivanmalahov@protonmail.com

rusoftfond@protonmail.com

g.kulahmet@protonmail.com

russian@protonmail.com

zoye596@protonmail.com

AES_KEY_GEN_ASSIST@protonmail.com

anoncrack@protonmail.com

ransomrust@protonmail.com

Big8obRoss@protonmail.com

ClaudiaBarnengham@protonmail.com

johhnyNicko926-2w7@protonmail.ru

support_config@protonmail.com

3bitcoins@protonmail.com

decrypter@protonmail.ch

polssh1@protonmail.com

polssh@protonmail.com

annali1984@protonmail.com

Cammora19@protonmail.com

johnbell27294@protonmail.ru

filelocker@protonmail.ch

grion@protonmail.com

kensgilbomet@protonmail.com

icarsole@protonmail.com

antnony.blackmer@protonmail.com

bactocepnyou@protonmail.com

juccy@protonmail.ch

omegawatch@protonmail.com

Recoverhelp@protonmail.ch

email@protonmail.com

pay.ransom@protonmail.com

errorout@protonmail.com

empty003@protonmail.com

test757@protonmail.com

ck03@protonmail.com

dg01@protonmail.com

cnc03@protonmail.com

DejackomeAjna@protonmail.com

CyberSCCP@protonmail.com

billy_will_help_you@protonmail.com

DecryptFox@protonmail.com

decryptiomega@protonmail.com

MotoxLocker2016@protonmail.com

lxhlp2@protonmail.com

FobosAmerika@protonmail.ch

Inq@protonmail.com

EncodeMan@protonmail.com

erica_files@protonmail.com

freefoam@protonmail.com

unhappymalware@protonmail.com

confirmprotect@protonmail.com

forGarryweber@protonmail.ch

oceannew_vb@protonmail.com

laborotoria@protonmail.ch

fileredeemer@protonmail.com

laboratoria@protonmail.ch

file_free@protonmail.com

tru8@protonmail.com

godra@protonmail.com

johnsmith965856@protonmail.ru

encryptor1996@protonmail.com

RdpLock@protonmail.com

hatmatdat@protonmail.com

crypt0r1@protonmail.com

aroshany@protonmail.com

Sansatsuo@protonmail.com

Unlock96@protonmail.com

hmdjam@protonmail.com

dorejadid1@protonmail.com

encryption1996@protonmail.com

payment.hkdecryp@protonmail.com

letgetyourfileback@protonmail.com

SARAH.BARRICK@protonmail.com

a9gfa9gh@protonmail.com

my-contact-email@protonmail.com

neitrino@protonmail.com

mr.anders@protonmail.com

DharmaParrack@protonmail.com

LockMecQqL3Ruy7V0RfZ@protonmail.com

xxxxxx@protonmail.com

bmps@protonmail.com

rootcopper@protonmail.com

KILLYOUASS@protonmail.com

restoring.data@protonmail.com

farik1@protonmail.com

admcphel@protonmail.ch

giantt1@protonmail.com

data.compromised@protonmail.com

ww6666@protonmail.com

helpdesk_makp@protonmail.ch

citrix2234@protonmail.com

FastBob@protonmail.com

mdk4y@protonmail.com

mckie31@protonmail.com

gareth.mckie31@protonmail.com

gaetano.olsen@protonmail.com

dbbackups@protonmail.com

asist.help@protonmail.com

mr.file@protonmail.com

localgroup@protonmail.com

splax1425@protonmail.com

bigbobross@protonmail.com

bliviondecrypt@protonmail.com

Filedecryptor@protonmail.com

honeylock@protonmail.com

Mr.TeslaBrain@protonmail.com

AdvancedBackup@protonmail.com

recover85@protonmail.com

unlock0101@protonmail.com

Vankacrypter@protonmail.com

Monez@protonmail.com

Y0urGod@protonmail.com

dadacrc@protonmail.com

maitregauillaume@protonmail.com

pacman.support@protonmail.com

yourencrypter@protonmail.ch

JohnSmith2917@protonmail.ru

pec.clean@protonmail.com

Upfileme@protonmail.com

Cleverhorse@protonmail.com

worldofdonkeys@protonmail.com

sdccd@protonmail.com

recovermydata@protonmail.com

pulpy@protonmail.ch

thomasRaymond@protonmail.com

rozlok@protonmail.com

no.torp3da@protonmail.ch

foxdecrypt@protonmail.com

hello_company@protonmail.com

oEasyyy4u@protonmail.com

decrfile@protonmail.com

file.wtf@protonmail.com

Recoverfile@protonmail.com

recover@protonmail.ch

retmydata@protonmail.co

morghoolius-valaar@protonmail.com

batary5588@protonmail.com

filegorilla1388@protonmail.com

panzergen552@protonmail.com

robocript@protonmail.ch

vine77725@protonmail.com

jonskuper578@protonmail.com

fox2278@protonmail.com

lion7872@protonmail.com

CamdenScott@protonmail.com

maosmarchiateen1980@protonmail.com

orfhissipmay1970@protonmail.com

devilguy666@protonmail.com

madeinussr@protonmail.com

inc_evilsi@protonmail.ch

decoding_service@protonmail.com

seonunlock@protonmail.com

johny-amazon-clients@protonmail.ru

xxxsupport@protonmail.com

badguyconsult@protonmail.com

sigrun_decryptor@protonmail.ch

mBoristheBlade@protonmail.com

lordcracker@protonmail.com

Leviathan13@protonmail.com

bellasmiths916262@protonmail.ru

company@protonmail.com

sub24@protonmail.ch

sup24@protonmail.ch

vxbtcpro@protonmail.com

shadowbroker_1@protonmail.com

zariqa@protonmail.com

john-amazon-help@protonmail.ru

xaodecrypt@protonmail.co

hiddenman0135@protonmail.com

BackFileHelp@protonmail.com

dcyptfils@protonmail.ch

Cryptopay12@protonmail.com

45.1.1.exe.bunny73737@protonmail.com

Bunny73737@protonmail.com

pr0t3am@protonmail.com

1976@protonmail.com

0f0ry0u@protonmail.com

Computer.Repair.Technician@protonmail.com

helpmegetfiles@protonmail.ch

losalphagroup@protonmail.com

excaliburarthur@protonmail.com

symbyosis@protonmail.com

decryps@protonmail.com

jOra@protonmail.com

personaliddecryptor@protonmail.com

gktlc5a@protonmail.com

yougame@protonmail.com

freewizard9@protonmail.co

florri.nord@protonmail.ch

mary.swann@protonmail.com

shirley.rourke@protonmail.com

freewizard9@protonmail.com

jeremiah.mahoney@protonmail.com

nikolateslaproton@protonmail.com

xwa@protonmail.ch

Gman222@protonmail.com

restorfile@protonmail.com

radrigoman@protonmail.com

MyDataRestore@protonmail.com

folielol@protonmail.com

netganster@protonmail.co

HillaryTrump@protonmail.com

wolksvagen@protonmail.com

aztecdecrrypt@protonmail.com

check1kyourf1les@protonmail.com

youfile@protonmail.com

itprocessor@protonmail.com

pcambulance1@protonmail.com

rightsor@protonmail.com

mammon-decrypt@protonmail.com

1964.mp4.mammon-decrypt@protonmail.com

1964.mp4.decoder-help@protonmail.com

filedecryption@protonmail.com

panda7499@protonmail.com

jokerkid@protonmail.com

your_last_chance_help@protonmail.com

-pr0t3am@protonmail.com

cryptofs@protonmail.com

-youfile@protonmail.com

restdoc@protonmail.com

maycat@protonmail.com

kangarooprotonmail@mail.ru

lenboza@protonmail.ch

dllteam@protonmail.com

dllteam1@protonmail.com

crypto25@protonmail.com

crypto52@protonmail.com

saacoin2@protonmail.com

123.doc.greystars@protonmail.com

Oktopys@protonmail.com

E-Mail-werichbin@protonmail.com

FJFNfDFfdsnb.jpg.worcservice@protonmail.ch

losamedicas@protonmail.com

minipod@protonmail.com

silentshade@protonmail.com

nmrbin775@protonmail.com

Misszero@protonmail.com

Cryptor2017@protonmail.com

unlockme123@protonmail.com

dryptiomega@protonmail.com

kfrvokr@protonmail.ch

ofibfosontsing@protonmail.com

ohnsonwhate@protonmail.com

SecurCyber@protonmail.com

decryptxxxx@protonmail.com

zanzibaron@protonmail.ch

BhatMaker@protonmail.com

votre_last_chance_help@protonmail.com

1.jpg.nefartanulo@protonmail.com

getthefiles@protonmail.com

Drheshi@protonmail.com

mrlocker@protonmail.com

timegame@protonmail.ch

mr.security@protonmail.com

gelar@protonmail.com

gelarx@protonmail.com

symabkp@protonmail.com

z1z2z3z4@protonmail.com

dsupport@protonmail.com

tramkal@protonmail.ch

x3m-pro@protonmail.com

decrsupports@protonmail.com

crypt24@protonmail.com

pardon1@protonmail.com

bahebah@protonmail.com

ptr_nyke@protonmail.ch

prt.nyke@protonmail.ch

dudaryda@protonmail.ch

oxar.ransomware666@protonmail.com

MastersRecover@protonmail.com

stephenjoffe@protonmail.com

brynn.werner@protonmail.com

opsvenezuela@protonmail.com

lA.supportfiless24@protonmail.ch

ashley.mowat@protonmail.com

siniyzabor@protonmail.com

annarummowellington91@protonmail.com

boganyrosina@protonmail.com

cilibertogeorgiana1992@protonmail.com

devinocandence96@protonmail.com

lakelynnmaske@protonmail.com

naborbrice1990@protonmail.com

imatprophav1982@protonmail.com

krystyna_trapp1989@protonmail.com

keelyjankowski1992@protonmail.com

jkjbg@protonmail.com

escirepi1974@protonmail.com

tamesepo1980@protonmail.com

erenomen1979@protonmail.com

backnabanney1983@protonmail.com

prefexdocve1989@protonmail.com

subsazimi1970@protonmail.com

distwilmufor1989@protonmail.com

reelsraserro1970@protonmail.com

bubgiasvilfa1985@protonmail.com

abcorviman1981@protonmail.com

isadora_mashburn1987@protonmail.com

rotenakge1989@protonmail.com

Teara.Baker.1977@protonmail.com

vadocpuce1975@protonmail.com

futamenlooo1981@protonmail.com

hostthingbourbuo1973@protonmail.com

bunakade1970@protonmail.com

chris-morris-1976@protonmail.com

tasha-williams.91@protonmail.com

enexunon1979@protonmail.com

lundcedrick@protonmail.com

buricoume1976@protonmail.com

kassulke_dora@protonmail.com

marks_arno@protonmail.com

zandra_simone1995@protonmail.com

olgearreabo1989@protonmail.com

profhandgomo1989@protonmail.com

din19@protonmail.com

loryEstside@protonmail.com

voprosi24@protonmail.ch

thenewskings@protonmail.com

elisabethelisabeth.tyler@protonmail.com

elisabeth.tyler@protonmail.com

supportdocctor@protonmail.com

anoss@protonmail.ch

heather.joseph@protonmail.com

SwaqLtd@protonmail.com

edteamoperation@protonmail.com

file.guesswho@protonmail.com

scohelpyou@protonmail.com

catchbtc797@protonmail.com

petersburgrecover@protonmail.com

fullrestore@protonmail.com

furhlordcracker@protonmail.com

isafeyourdata@protonmail.com

filecrypts@protonmail.com

b1tcoin2020@protonmail.com

dinanit@protonmail.com

cryptfiles@protonmail.com

dlt0181309@protonmail.com

Unlockme501@protonmail.ch

msupport2019@protonmail.com

puljaipopre1981@protonmail.com

alaahamid@protonmail.com

minginskilian@protonmail.com

schofield_niko@protonmail.com

karenclear@protonmail.com

shangtech@protonmail.ch

nmode@protonmail.com

decryption_help@protonmail.com

alfredolopes@protonmail.com

dtddecrypt@protonmail.com

backupfiles01@protonmail.com

william_jefferson1@protonmail.com

savemyfiles@protonmail.com

flopored@protonmail.com

villiamsscorj_rembly@protonmail.com

support_2020_locker@protonmail.com

lucky_top@protonmail.com

filemaster777@protonmail.com

akzhq00705@protonmail.com

davidrecovery@protonmail.com

luntik2316@protonmail.com

akzhq615@protonmail.com

akzhq530@protonmail.com

savedata2@protonmail.com

genfiles@protonmail.com

backup_499@protonmail.com

checkfilelock@protonmail.ch

akzhq710@protonmail.com

frosculandra1975@protonmail.com

trafyralhi1988@protonmail.com

sanctornopul1986@protonmail.com

ringpawslanin1984@protonmail.com

liebupneoplan19@protonmail.com

stivobemun1979@protonmail.com

elsleepamlen1988@protonmail.com

southbvilolor1973@protonmail.com

flapalinta1950@protonmail.com

xersami@protonmail.com

wellproxadsit1980@protonmail.com

mabuhyli1982@protonmail.com

rootlogin12@protonmail.com

neucomsiocia1980@protonmail.com

renviotiori1976@protonmail.com

datauser17234@protonmail.ch

decryptMe1956@protonmail.ch

captain.of.blackpearl@protonmail.com

black.berserks@protonmail.com

se_harrd@protonmail.com

nopain555@protonmail.com

2020x0@protonmail.com

messi_tr_2020@protonmail.com

Bk_Data@protonmail.com

brandon_draven@protonmail.com

erich_northman@protonmail.com

laraholmort@protonmail.com

geenakormann@protonmail.com

bobbybarnett2020@protonmail.com

friedashumes@protonmail.com

markngibson10@protonmail.com

cost1BTC@protonmail.com

chec1kyourf1les@protonmail.com

digistart@protonmail.com

Black_Wayne@protonmail.com

Decryptdatafiles@protonmail.com

tsec3x777@protonmail.com

hublle@protonmail.com

clearcom@protonmail.com

eight20@protonmail.com

-black_wayne@protonmail.com

proservicez@protonmail.com

JohnCastle1000@protonmail.com

filesgetback@protonmail.ch

JOBCRYPTER@protonmail.com

VoidDeceryptor@protonmail.com

zacapa2020@protonmail.com

coronaDecrypt0r@protonmail.com

goldmymind@protonmail.com

epiclesis@protonmail.ch

windat@protonmail.com

windat1@protonmail.com

nackcwand@protonmail.com

datadatareturn@protonmail.com

AndyMitton@protonmail.com

tokog@protonmail.com

tomasrich2020@protonmail.com

n2rest0re@protonmail.com

guifullchartil970@protonmail.com

phrasitliterl981@protonmail.com

nguifullchartil970@protonmail.com

nphrasitliterl981@protonmail.com

irest0re@protonmail.com

unl0ckme@protonmail.com

securityit123@protonmail.com

coincidenceleague@protonmail.com

fanlabomos1974@protonmail.com

eranndicuc1978@protonmail.com

salutem@protonmail.com

the.dodger@protonmail.com

sp00f3rsupp0rt@protonmail.com

rep_stosd@protonmail.com

support4you@protonmail.com

universe1@protonmail.ch

decrypt24@protonmail.com

brian.r.goodwin@protonmail.com

m4xroothackerteam@protonmail.com

UnlockAlexKingman@protonmail.com

MilesFlannagan@protonmail.com

rupp@protonmail.ch

decrypteasy@protonmail.cc

iracomp2@protonmail.ch

mrddnet_support@protonmail.ch

achtung_admin@protonmail.com

aam_sysadmin@protonmail.com

JinMaglaya@protonmail.com

SuzuMcpherson@protonmail.com

PhanthavongsaNeveyah@protonmail.com

RomanchukEyla@protonmail.com

SayanWalsworth96@protonmail.com

SchreiberEleonora@protonmail.com

DecrypterSupport@protonmail.com

Decryptions@protonmail.com

ScorpionEncryption@protonmail.com

Datarest0re@protonmail.com

blackroot54@protonmail.com

SupportOdveta@protonmail.com

decodeodveta@protonmail.com

Deccoder431@protonmail.com

cryptomadbusiness@protonmail.com

flowerboard@protonmail.com

05250lock@protonmail.com

maill_helpme@protonmail.com

newneo1312@protonmail.com

bitsupportz@protonmail.com

asmodey3301@protonmail.com

btc_bitts@protonmail.com

po2977@protonmail.com

Tbr66@protonmail.com

geniusid@protonmail.ch

shelbyboom@protonmail.com

252BSafeGman@protonmail.com

252BMespinoza980@protonmail.com

252Beladovin1975@protonmail.com

252Bdecryptxxx@protonmail.com

253Ddecryptxxx@protonmail.com

25257Bdresdent@protonmail.co

252BF-data@protonmail.com

252BNetGanster@protonmail.com

253DNetGanster@protonmail.com

252Bcallmegoat@protonmail.com

25255BBackmydata@protonmail.com

252Bpizdasobaki@protonmail.com

252Bcryptoplant@protonmail.com

252Baztecdecrypt@protonmail.com

252Byoursalvations@protonmail.ch

252Bincongnitoman@protonmail.com

252Bcastor-troy-restore@protonmail.com

252BDsupport@protonmail.com

253DDsupport@protonmail.com

252BDecryptutility@protonmail.com

252Byouneedmail@protonmail.com

252Bcashdashsentme@protonmail.com

252Bcashdashsentme@protonmail.co

252B.bugbugo@protonmail.co

252B.werichbin@protonmail.com

252B.coronaVi2022@protonmail.ch

252Btomascry@protonmail.com

252Brdpconnect@protonmail.com

253Dcashdashsentme@protonmail.com

252B.bugbugo@protonmail.com

252Bhjelp.main@protonmail.com.de

253Drdpconnect@protonmail.com

Aboutshelbyboom@protonmail.com

oktropys@protonmail.com

hccapx@protonmail.com

patern32@protonmail.com

garryweber@protonmail.ch

Restore@protonmail.ch

Cobra_Locker@protonmail.com

Trojan.Win32.shelbyboom@protonmail.com

Trojan.shelbyboom@protonmail.com

Santa_helper@protonmail.com

Recuperadados@protonmail.com

Zagrec@protonmail.com

52pojie_mail@protonmail.com

Anony.killers@protonmail.com

5btc@protonmail.com

AskHelp@protonmail.com

castor-troy-restore@protonmail.com

Servicedeskpay@protonmail.com

yoursalvations@protonmail.ch

onepconebtc@protonmail.com

zemblax@protonmail.com

no.xop@protonmail.ch

no.btc@protonmail.ch

no.btcw@protonmail.ch

pr0t3eam@protonmail.com

backuping@protonmail.com

0x1service@protonmail.com

3816945@protonmail.com

Decryptcn@protonmail.ch

mantiticvi1976@protonmail.com

fahydremu1981@protonmail.com

Evagreps83@protonmail.com

strange_wanderer@protonmail.com

hentai.onichan.key@protonmail.ch

sirer1@protonmail.com

alanson_street8@protonmail.com

lambchristoffer@protonmail.com

SamanthaKirbinron@protonmail.com

DenisUfliknam@protonmail.com

RobertGorgris@protonmail.com

unlockransomware@protonmail.com

xvfxgw3929@protonmail.com

werichbin@protonmail.com

you.help5@protonmail.com

torsed@protonmail.ch

pedantback@protonmail.com

dbger@protonmail.com

callmegoat@protonmail.com

decrypt25@protonmail.com

decrypt52@protonmail.com

fobosamerika@protonmail.ch

AbbsChevis@protonmail.com

newhelper@protonmail.ch

OttoZimmerman@protonmail.ch

logiteam@protonmail.com

lolitahelp@protonmail.com

aztecdecrypt@protonmail.com

crab1917@protonmail.com

rohitramses@protonmail.com

1rest0re@protonmail.com

DineshSchwartz1965@protonmail.com

RupertMariner1958@protonmail.com

StephanForenzzo1985@protonmail.com

ppp4ddd@protonmail.com

mewellwisher@protonmail.ch

zorab28@protonmail.co

email2_zuza@protonmail.com

Catsexy@protonmail.com

worcservice@protonmail.ch

rdpconnect@protonmail.com

fixfiles@protonmail.ch

GeorjeHalique@protonmail.com

Billy_will_help_you@protonmail.com

mr.dec@protonmail.com

vurten_knyert@protonmail.com

Ben.betalen@protonmail.com

systemwall@protonmail.com

2Byoursalvations@protonmail.ch

2Bincongnitoman@protonmail.com

2Bcastor-troy-restore@protonmail.com

2BDsupport@protonmail.com

3DDsupport@protonmail.com

2Bcashdashsentme@protonmail.com

3Dcashdashsentme@protonmail.com

2BDecryptutility@protonmail.com

2B.bugbugo@protonmail.com

2Byouneedmail@protonmail.com

2B.coronaVi2022@protonmail.ch

2Btomascry@protonmail.com

2Bhjelp.main@protonmail.com.de

2Bcashdashsentme@protonmail.co

2Brdpconnect@protonmail.com

3Drdpconnect@protonmail.com

2B.bugbugo@protonmail.co

2B.werichbin@protonmail.com

2BSafeGman@protonmail.com

2BMespinoza980@protonmail.com

2Beladovin1975@protonmail.com

2Bdecryptxxx@protonmail.com

3Ddecryptxxx@protonmail.com

255BBackmydata@protonmail.com

257Bdresdent@protonmail.co

2BF-data@protonmail.com

2BNetGanster@protonmail.com

3DNetGanster@protonmail.com

2Bcallmegoat@protonmail.com

2Bpizdasobaki@protonmail.com

2Bcryptoplant@protonmail.com

2Baztecdecrypt@protonmail.com

SafeGman@protonmail.com

Mespinoza980@protonmail.com

eladovin1975@protonmail.com

decryptxxx@protonmail.com

7Bdresdent@protonmail.co

F-data@protonmail.com

NetGanster@protonmail.com

5BBackmydata@protonmail.com

pizdasobaki@protonmail.com

cryptoplant@protonmail.com

incongnitoman@protonmail.com

Dsupport@protonmail.com

Decryptutility@protonmail.com

youneedmail@protonmail.com

cashdashsentme@protonmail.com

cashdashsentme@protonmail.co

tomascry@protonmail.com

hjelp.main@protonmail.com.de

Satan2018@protonmail.com

Classesyouneedmail@protonmail.com

youneedmail@protonmail.co

ClassesDecryptutility@protonmail.com

MerlinStusan@protonmail.com

bitkick@protonmail.com

Classesvurten_knyert@protonmail.com

Tizer77234@protonmail.com

recfiles@protonmail.com

JoniCarter@protonmail.com

ClassesDsupport@protonmail.com

Classescastor-troy-restore@protonmail.com

Cryptmanager@protonmail.com

Mammon-decrypt@protonmail.com

Classes.supportfiless24@protonmail.ch

Classesincongnitoman@protonmail.com

wayneevenson@protonmail.com

Classesyoursalvations@protonmail.ch

flower.harris@protonmail.com

anna.kurtz@protonmail.com

Classesaztecdecrypt@protonmail.com

Classescryptoplant@protonmail.com

Classespizdasobaki@protonmail.com

Classescallmegoat@protonmail.com

Bitcharity@protonmail.com.com

ClassesNetGanster@protonmail.com

ClassesF-data@protonmail.com

Fileb@protonmail.com

dresdent@protonmail.co

dresdent@protonmail.com

Classesdecryptxxx@protonmail.com

omegax0@protonmail.com

Classeseladovin1975@protonmail.com

ClassesMespinoza980@protonmail.com

Admincrypt@protonmail.com

Corpseworm@protonmail.com

ClassesSafeGman@protonmail.com

britishcamgirl@protonmail.com

lxhlp@protonmail.com

Classesrdpconnect@protonmail.com

backinfo@protonmail.com

Help.me24@protonmail.com

decrypt4data@protonmail.com

Classestomascry@protonmail.com

Classes.coronaVi2022@protonmail.ch

use_harrd@protonmail.com

Classescashdashsentme@protonmail.com

loybranunun1975@protonmail.com

Backmydata@protonmail.com

doc_restore@protonmail.com

2rest0re@protonmail.com

gangflsbang@protonmail.ch

reddragon3335799@protonmail.ch

zalogator@protonmail.com

buddy888@protonmail.com

datareturn@protonmail.com

redteamoperation@protonmail.com

t310ea89b4347@protonmail.com

tabufa@protonmail.com

foxnitro@protonmail.com

supportcrypt2019@protonmail.com

Liweixin888@protonmail.com

Firstmaillog@protonmail.com

Folieloi@protonmail.com

RECOVERUNKNOWN@protonmail.com

heyklog@protonmail.com

GarryAxe@protonmail.ch

aperfectday2018@protonmail.com

alix1011@protonmail.com

yogynicof@protonmail.com

EdsonEpsok@protonmail.com

Alfredhormund@protonmail.com

rescuerr@protonmail.com

btpsupport@protonmail.com

coronaVi2022@protonmail.ch

cottleakela@protonmail.com

happy_sysadmin@protonmail.com

nostro19@protonmail.com

unIckr@protonmail.com

grupposupp@protonmail.ch

help0f0ry0u@protonmail.com

recoverydata52@protonmail.com

retmydata@protonmail.com

secureserver-eu@protonmail.com

trupm@protonmail.com

X280@protonmail.com

decryptFox@protonmail.com

grafimatriux72224733@protonmail.com

nomoreletters@protonmail.ch

jamesgonzaleswork1972@protonmail.com

Honeylock@protonmail.com

Recoveryhelp2019@protonmail.com

Decrypt.Russ@protonmail.com

support981723721@protonmail.com

fixprotectvvv@protonmail.com

Supportclown1@protonmail.com

SupportC14@protonmail.com

xvfxgw2929@protonmail.com

graff_de_malfet@protonmail.ch

mary.weston@protonmail.com

getscoin2@protonmail.com

TimisoaraHackerTeam@protonmail.com

my_balancebit@protonmail.com

wannacry.decryptor_v4@protonmail.com

iknowyouandiseeyou@protonmail.ch

MR_Liosion@protonmail.com

jacksparrow@protonmail.com

helips@protonmail.com

0xc030@protonmail.ch

aes-ni@protonmail.com

AskHeIp@protonmail.com

atlashelp@protonmail.com

atlasfix@protonmail.com

ssananunak1987@protonmail.com

bronmerkberpa1976@protonmail.com

Backuppc@protonmail.com

Backuppc1@protonmail.com

barracudahelp@protonmail.com

atlantis_cf@protonmail.com

fmhir@protonmail.com

eula.2052.txt.coder007@protonmail.com

install.exe.coder007@protonmail.com

money.doc.coder007@protonmail.com

TagFile_S.txt.coder007@protonmail.com

vcredist.bmp.coder007@protonmail.com

python.exe.coder007@protonmail.com

python2.7.exe.coder007@protonmail.com

python2.exe.coder007@protonmail.com

BatHelp@protonmail.com

crab7765@protonmail.com

cryptgh0st@protonmail.com

crypto7892@protonmail.com

anticrypto@protonmail.com

decoder-help@protonmail.com

s1an1er111@protonmail.com

excuses@protonmail.com

execute@protonmail.com

file1@protonmail.com

Filesreturn247@protonmail.com

gluttonBD@protonmail.com

lnq@protonmail.com

hiddentear@protonmail.com

paymifordecrypt@protonmail.ch

InfiniteDecryptor@protonmail.com

kts2018@protonmail.com

key-support@protonmail.com

error-crypt@protonmail.com

king.ouroboros@protonmail.com

kvlly@protonmail.ch

mr.leen@protonmail.com

blackgoldl23@protonmail.com

xaodecrypt@protonmail.com

qnbqwqe@protonmail.com

alka@protonmail.com

westlan@protonmail.ch

j0ra@protonmail.com

setimichas1971@protonmail.com

bitchasshole@protonmail.com

StephenJoffe@protonmail.com

zikr@protonmail.com

zikra@protonmail.com

spare322@protonmail.ch

only4you@protonmail.com

resurrection777@protonmail.com

pabluk700@protonmail.ch

hackcwand@protonmail.com

hackwand@protonmail.com

supportfiless24@protonmail.ch

MerlinVelso@protonmail.com

cyborgyarraq@protonmail.ch

HiddenMan0135@protonmail.com

zzz12341@protonmail.com

AdamBrown89@protonmail.com

William_Kidd_2019@protonmail.com

helpteam38@protonmail.com

l33tsupp0rt1337@protonmail.com

fun63s@protonmail.com

AliMussafenLibat@protonmail.com

helpnetin@protonmail.com

Killback@protonmail.com

mattpear@protonmail.com

Yourencrypter@protonmail.ch

recoverymydata@protonmail.com

artemy75@protonmail.com

getthefiles2@protonmail.ch

newhelper24@protonmail.ch

alexwind46@protonmail.com

usernamus@protonmail.com

basilisque@protonmail.com

Blitzkriegpc@protonmail.com

Bit_decrypt@protonmail.com

bugbugo@protonmail.com

dawndec001@protonmail.com

painplain98@protonmail.com

cammora19@protonmail.com

ccryptor@protonmail.com

unlckr@protonmail.com

un92@protonmail.com

china_jm@protonmail.ch

cobain_ransom@protonmail.com

fixfilex@protonmail.ch

CoronaDecrypt0r@protonmail.com

FushenKingdee@protonmail.com

cr1-silvergold1@protonmail.com

admin-amnesia@protonmail.com

btc.com@protonmail.ch

no.xm@protonmail.ch

recovery.company@protonmail.com

iracomp4@protonmail.ch

yourencypter@protonmail.com

cybervigilante4453@protonmail.com

bbqb@protonmail.com

Santa-helper@protonmail.com

shellexec@protonmail.com

jeeperscrypt@protonmail.com

qwqd@protonmail.com

incognitoman@protonmail.com

djang0unchain3d@protonmail.com

dmo9o4zB@protonmail.com

Agent.DMR@protonmail.com

burcr@protonmail.com

DataRescue@protonmail.com

cynthia-it@protonmail.com

Empty003@protonmail.com

cryptopatronum@protonmail.com

thecurelegion@protonmail.com

zazakuku@protonmail.com

RobSmithMba@protonmail.com

montserrat501@protonmail.com

error03@protonmail.com

ex_parvis@protonmail.com

fastwindGlobe@protonmail.com

FlamingoRans@protonmail.com

mykeyhelp@protonmail.com

french101@protonmail.ch

HanzOttoschmidt@protonmail.com

xxcte2664@protonmail.com

getcoin2@protonmail.com

FreeWizard9@protonmail.com

chines34@protonmail.ch

microcost@protonmail.ch

gygabot@protonmail.com

DecryptFs@protonmail.com

datahelper@protonmail.com

RemotePChelper@protonmail.com

lafoievologjanin123@protonmail.com

best666decoder@protonmail.com

Help557@protonmail.com

tr0ning@protonmail.com

decoderforyou@protonmail.com

hlpp@protonmail.ch

jackgreen13@protonmail.com

cryptomavens@protonmail.com

letsgetyourfileback@protonmail.com

soft.russian@protonmail.com

Cost1BTC@protonmail.com

a11back@protonmail.ch

JamesBaker78@protonmail.com

backfile99@protonmail.com

loggitore1984@protonmail.com

KOK08@protonmail.com

mailnitrom@protonmail.ch

r3vo@protonmail.com

lock2017@protonmail.com

slanson_street8@protonmail.com

back7@protonmail.ch

Mayth24@protonmail.com

momsbestfriend@protonmail.com

jj@protonmail.ch

motox2016@protonmail.com

payforsecurity_1@protonmail.com

_24_7@protonmail.com

restorefiles@protonmail.ch

sporter4499@protonmail.com

obliviondecrypt@protonmail.com

tk.btcw@protonmail.ch

softs98@protonmail.com

usertyty@protonmail.ch

BlackMajor@protonmail.com

parisher@protonmail.com

Pec.clean@protonmail.com

recoverydata54@protonmail.com

nadwkjk@protonmail.com

hello_psecu@protonmail.com

ransunlock@protonmail.com

razor2020@protonmail.ch

Paradiseconnect@protonmail.com

malieholtan@protonmail.com

rebushelp@protonmail.com

ambrosiaa@protonmail.com

atomickule@protonmail.com

getdataback22@protonmail.com

unlockdata22@protonmail.com

billwong73@protonmail.com

evopro@protonmail.com

servicedigilogos@protonmail.com

cosanostra19@protonmail.com

decrypt0r-help@protonmail.com

dalailama2015@protonmail.ch

Wecanhelp@protonmail.com

helptate@protonmail.com

cybersccp@protonmail.com

dd.coala@protonmail.com

dec.service@protonmail.com

glushkov@protonmail.ch

DiskDoctor@protonmail.com

rsupp@protonmail.ch

executioner.ransom@protonmail.com

fastbob@protonmail.com

bakfiles@protonmail.com

PabFox@protonmail.com

_garryweber@protonmail.ch

anony46NcRyptr708onion@protonmail.ch

godra@protonmail.ch

darkusmbackup@protonmail.com

helpmedecrypt@protonmail.com

cryz1@protonmail.com

alanwalkergod@protonmail.com

greystars@protonmail.com

Inchinaiturtle@protonmail.com

WuTang444@protonmail.com

fileisafe@protonmail.com

JeanRenoAParis@protonmail.com

provectus@protonmail.com

kampretos@protonmail.com

OrdinalScale@protonmail.com

mstr.hack@protonmail.com

slothcbx@protonmail.com

hernansec@protonmail.ch

Terminator_123@protonmail.com

DharmaBarrack@protonmail.com

MayarChenot@protonmail.com

magicman22@protonmail.ch

RestoreFile@protonmail.com

Files4463@protonmail.ch

KOK8@protonmail.com

maxidecrypt@protonmail.com

suppdecrypt@protonmail.com

moncoin@protonmail.com

imaje.jpg.nefartanulo@protonmail.com

nefartanulo@protonmail.com

newrar@protonmail.com

6699nm@protonmail.com

die_yourself@protonmail.com

Ad_finem001@protonmail.com

TEST@protonmail.com

spaghetih@protonmail.com

pizzacrypts@protonmail.com

quickhelp24@protonmail.com

Recuperaddados@protonmail.com

elizabeth7@protonmail.com

gaetwelsenba1983@protonmail.com

otostehos1970@protonmail.com

kirsninmaino1977@protonmail.com

hemulnina1974@protonmail.com

ibfosontsing@protonmail.com

papinsdasun1982@protonmail.com

cestidemet1983@protonmail.com

MelisaPeterman@protonmail.com

CR7213uDS32s@protonmail.com

jodishunterteam@protonmail.com

imBoristheBlade@protonmail.com

unlockmeplease@protonmail.com

Filegorilla1388@protonmail.com

vendetta553@protonmail.com

mrbin775@protonmail.com

mrdeep@protonmail.com

translatos@protonmail.com

fbifine@protonmail.com

serpom@protonmail.com

vinilblind@protonmail.com

sills@protonmail.ch

encryptfile@protonmail.com

dec_restore@protonmail.com

panda831@protonmail.com

sysfrog@protonmail.com

helptounlock@protonmail.com

bivisfiles@protonmail.com

cryptofiles20202020@protonmail.com

langdiru1887@protonmail.com

mr.crypteur@protonmail.com

xlsx@protonmail.com

yakomoko@protonmail.com

Malakot@protonmail.com

qqxxxxxqq@protonmail.com

wwxxxxxww@protonmail.com

Recoverybat@protonmail.com

hacker_decryption@protonmail.ch

doctorSune@protonmail.com

supportdoctor@protonmail.com

3335799@protonmail.com

0x69x@protonmail.com

spaxl425@protonmail.com

data1992@protonmail.com

pianist6@protonmail.com

asgardmaster5@protonmail.com

yougame@protonmail.ch

unlocking2020@protonmail.ch

flotera@protonmail.ch

databack2@protonmail.com

phrasitliter1981@protonmail.com

sprosinas2@protonmail.com

YourDataHere@protonmail.com

Cobra_Locker2.0@protonmail.com

LordCracker@protonmail.com

E-Mail-lock2017@protonmail.com

pizzacrypts@protonmail.co

Sepsis@protonmail.com

E-Mail-Sepsis@protonmail.com

shark003@protonmail.com

jschweiz@protonmail.ch

MastersRecovery@protonmail.com

nowayout@protonmail.com

systempc18x@protonmail.com

Lockify@protonmail.com

gibberishEdmundBass@protonmail.com

VenisRansom@protonmail.com

odin19@protonmail.com

corporacaoxrat@protonmail.com

xzzx1@protonmail.com

zeoticus@protonmail.com

Payfordecrypt@protonmail.com

SilentDeathDecryptor@protonmail.com

RecoveryData1@protonmail.com

SantaGman@protonmail.com

vashmail@protonmail.com

E-Mail-mr.crypteur@protonmail.com

Reftu0ne@protonmail.com

ZinoCrypt@protonmail.com

data_recovery_soft@protonmail.com

E-Mail-painplain98@protonmail.com

entsperren2020@protonmail.ch

genetid@protonmail.ch

databaseack2@protonmail.com

decoder83540@protonmail.com

Exte2@protonmail.com

0301192293@protonmail.com

zetfile@protonmail.ch

coder007@protonmail.com

desbloqueo2020@protonmail.ch

FridaFarko@protonmail.com

worknow@protonmail.com

Sidmouleux996@protonmail.com

tellyouthepass@protonmail.com

Bossi_tosi@protonmail.com

guifullchartil1970@protonmail.com

aireyeric@protonmail.com

ellershaw.kiley@protonmail.com

raingemaximo@protonmail.com

gareth.mckie3l@protonmail.com

decryptdocs@protonmail.com

MasterFile001@protonmail.com

txdot911@protonmail.com

decrypt_data2@protonmail.com

zoro4747@protonmail.com

itunes_decrypt@protonmail.com

nordfox@protonmail.com

middleman2020@protonmail.com

Vitaly.Yermakov@protonmail.com

unk921@protonmail.com

4shadow@protonmail.com

uzuvnkyh@protonmail.com

x1881@protonmail.com

checlkyourfiles@protonmail.com

Sample portfolio of currently active Totanota accounts used by ransomware gangs and DIY ransomware users:

batmanbitkal@tutanota.com

kisamurusa@tutanota.com

ventablack@tutanota.de

luxenburg@tutanota.com

help-123@tutanota.com

diegobtc@tutanota.com

robot2018@tutanota.com

adobe-123@tutanota.com

qqwp@tutanota.com

amber777king@tutanota.com

Darksides@tutanota.com

filekey77@tutanota.com

crypt7@tutanota.com

luxsoft@tutanota.com

lablabpub@tutanota.com

MasterLuBu@tutanota.cock.li

helpsok@tutanota.com

keyfiles@tutanota.com

filesback@tutanota.com

devil98@tutanota.com

Theransom@tutanota.com

job2019@tutanota.com

phobosrecovery@tutanota.com

com-gloria@tutanota.com

member987@tutanota.com

bbbitcrypt@tutanota.com

DECRPT@tutanota.com

SoporteVoid@tutanota.com

unl0ckerpkx@tutanota.com

decoderma@tutanota.com

VoidFiles@tutanota.com

coronavirus19@tutanota.com

encrypt4u@tutanota.com

rsaencrypt@tutanota.com

Zizz@tutanota.de

klowershitl835@tutanota.com

decisivekey@tutanota.com

Sherminator.help@tutanota.com

starbax@tutanota.com

blacknord@tutanota.com

20xser@tutanota.com

der.xser@tutanota.com

datareesstore@tutanota.com

20sherminator.help@tutanota.com

der.Sherminator.help@tutanota.com

ways.xser@tutanota.com

ways.Sherminator.help@tutanota.com

patagonia92@tutanota.com

npr0tector@tutanota.com

nrestoreassistant2@tutanota.com

u201c24H@tutanota.com

nStephenJoffe@tutanota.com

nAskHeIp@tutanota.com

nFoxHelp@tutanota.com

nMelisaPeterman@tutanota.com

ntommy.sanders@tutanota.com

nfilekerk@tutanota.com

nibfosontsing@tutanota.com

nanatova2@tutanota.com

nanatoday@tutanota.com

nmanagersmaers@tutanota.com

n2.Hariliuios@tutanota.com

nsherminator.help@tutanota.com

nmrromber@tutanota.com

ndecodedecode@tutanota.com

nzeoticus@tutanota.com

tDataRescue@tutanota.com

nbest666decoder@tutanota.com

ngiveyoukey@tutanota.com

nJamesBaker78@tutanota.com

nMayth24@tutanota.com

nAdamBrown89@tutanota.com

adresspower@tutanota.com

notgoodnews@tutanota.com

AskHelp@tutanota.com

nAskHelp@tutanota.com

nAlanRed@tutanota.com

BobGreen85@tutanota.com

nBobGreen85@tutanota.com

backbigdata@tutanota.com

ntyrkinovusr@tutanota.com

BatHelp@tutanota.com

nBatHelp@tutanota.com

nCtorsenoria@tutanota.com

nnekross@tutanota.com

nklowershit1835@tutanota.com

SmartDen@tutanota.com

nmiddleman2020@tutanota.com

MarkTrue88@tutanota.com

ndprworkjessiaeye1955@tutanota.com

Bernardocarlos@tutanota.com

nBernardocarlos@tutanota.com

nullcipher@tutanota.com

SafeGman@tutanota.com

qhrghghk@tutanota.com

nqhrghghk@tutanota.com

SantaGman22@tutanota.com

ntimothymandock@tutanota.com

Wenuptwen1@tutanota.com

decrpt@tutanota.com

iamwellwisher@tutanota.com

galgalgalhalk@tutanota.com

kavariusing@tutanota.com

252BStuardRitchi@tutanota.com

252Bpixell@tutanota.com.ph

pashmak@tutanota.com

StuardRitchi@tutanota.com

2BStuardRitchi@tutanota.com

2Bpixell@tutanota.com.ph

pixell@tutanota.com.ph

Zeman@tutanota.de

Helps@tutanota.com

raynorzlol@tutanota.com

savemyself1@tutanota.com

akzhq808@tutanota.com

Kromber@tutanota.com

Kishemez@tutanota.com

somalie555@tutanota.com

fedoremelianenko@tutanota.com

Huntingdonu@tutanota.com

WayneEvenson@tutanota.com

blackmax@tutanota.com

filemgr@tutanota.com

anfreesextuo1982@tutanota.com

nanfreesextuo1982@tutanota.com

AleksanderEmelianenko@tutanota.com

mr.crypteur@tutanota.com

koreadec@tutanota.com

shine1@tutanota.com

2.Galgalgalhalk@tutanota.com

petek@tutanota.com

BCPFILE17@tutanota.com

removeme2020@tutanota.com

arnoldmichel2@tutanota.com

system_stop2020@tutanota.co

starbax@tutanota.de

mr.crypt@tutanota.com

ths1337@tutanota.com

pendor111@tutanota.com

Filesrestore@tutanota.com

robinhoodxxx007@tutanota.com

DILIGATMAIL@tutanota.com

DILIGATMAIL7@tutanota.com

PIFAGORMAIL@tutanota.com

johnsonwhate@tutanota.com

dongeswas@tutanota.com

Hariliuios@tutanota.com

Galgalgalgalk@tutanota.com

Cryptor6@tutanota.com

u00a0WSS911@tutanota.com

PedantBack@tutanota.com

evangelina.mathews@tutanota.com

darkpart@tutanota.com

darkware@tutanota.com

ACCUDATA1@tutanota.com

ACCUDATA2@tutanota.com

afroditeam@tutanota.com

atilla666@tutanota.com

redbul@tutanota.com

qar48@tutanota.com

zer@tutanota.com

picture.jpg.qar48@tutanota.com

ElmersVictoria@tutanota.com

cryptoshocker@tutanota.com

backtonormal@tutanota.com

glushkov@tutanota.de

master777@tutanota.com

donutmmm@tutanota.com

EncodeMan@tutanota.com

getkeys@tutanota.com

funfacts11@tutanota.com

proof3200@tutanota.com

program3200@tutanota.com

koreajoin69@tutanota.com

tru8@tutanota.com

rdphelp@tutanota.com

svchostport@tutanota.com

hildaseriesnetflix125@tutanota.com

LINDA.HARTLEY@tutanota.com

sabantui@tutanota.com

atilla666@tutanota.co

2.kavariusing@tutanota.com

bmps@tutanota.com

rootcopper@tutanota.com

bl4ckdr4gon@tutanota.com

asist5000@tutanota.com

JonStokton@tutanota.com

filessnoop@tutanota.com

localgroup@tutanota.com

avariusing@tutanota.com

StaRcRypt@tutanota.com

Ad_finem@tutanota.com

pendor_1@tutanota.com

ecodeme666@tutanota.com

anonimus852@tutanota.com

0x720x730x610x30@tutanota.com

0x720x730x610x31@tutanota.com

eliasmarco@tutanota.com

getsend@tutanota.com

symmetries0@tutanota.com

cryptget@tutanota.com

help73@tutanota.com

Helpcrypt1@tutanota.com

ex_parvis@tutanota.com

szems@tutanota.com

donutman@tutanota.com

lafoievologjanin123@tutanota.com

sevenbbvv@tutanota.com

henry.prowse@tutanota.com

imran.adil@tutanota.com

merymerime@tutanota.com

clified@tutanota.com

Alissa.carney@tutanota.com

pink-paw.gif.arnoldmichel2@tutanota.com

atila666@tutanota.com

sambolero@tutanota.com

prusa@tutanota.de

dark_code@tutanota.com

xcv786@tutanota.com

fordGolden93@tutanota.com

E-Mail-afroditateam@tutanota.com

king.ouroboros@tutanota.de

Jinnyg@tutanota.com

E-Mail-Filemgr@tutanota.com

Merd@tutanota.com

aq811@tutanota.com

jon2019@tutanota.com

bobelectron@tutanota.com

vimbilbom@tutanota.com

johsonshate@tutanota.com

retoreassistant2@tutanota.com

BhatMaker@tutanota.com

VoidDeceryptor@tutanota.com

kalimenok@tutanota.com

pristonklav@tutanota.com

Yourencrypt@tutanota.com

systems32x@tutanota.com

stephenjoffe@tutanota.com

gracie.reed@tutanota.com

shane.gilles@tutanota.com

wahabigreen@tutanota.com

loder903@tutanota.com

regina.shelton@tutanota.com

buratino2@tutanota.com

ticketbit@tutanota.com

flower.harris@tutanota.com

kay.robertson@tutanota.com

kfsmail@tutanota.com

onepconebtc@tutanota.com

xxxinstant@tutanota.com

2.Galgalgalgalk@tutanota.com

covid-123@tutanota.com

yongloun@tutanota.com

srat@tutanota.com

helpforyoupc@tutanota.com

1.jpg.arnoldmichel2@tutanota.com

dtddesht@tutanota.com

reddragon3335799@tutanota.com

HelpforFiles@tutanota.com

mrdjohni@tutanota.com

akzhq725@tutanota.com

encryptboys@tutanota.com

whyruencrypt@tutanota.com

demancryptolock@tutanota.com

thepersephone@tutanota.com

vivanger123@tutanota.com

mccreight.ellery@tutanota.com

chiaraKolkmann@tutanota.com

r4ns0m@tutanota.com

moon4x4@tutanota.com

Hubble77@tutanota.com

filedec@tutanota.com

eleezcry@tutanota.com

-black_wayne@tutanota.com

coincidenceleague@tutanota.com

garrymagic@tutanota.com

darkwaiderr@tutanota.com

remotePChelper@tutanota.com

skgrhk2018me@tutanota.com

johnsmith987654@tutanota.com

cricket@tutanota.com

FilesHelp@tutanota.com

darkencryptor@tutanota.com

Decfile431@tutanota.com

smartrecav@tutanota.com

zxqwopnm@tutanota.com

252Bdfvdv@tutanota.com

252Bjakie.nunes@tutanota.com

252Bhallome@tutanota.com

252BBlacknord@tutanota.com

pixell@tutanota.com

yuzhou13@tutanota.com

tchukopchu@tutanota.com

klowershit1835@tutanota.com

file987@tutanota.com

bitrequest@tutanota.com

Blacknord@tutanota.com

mirey@tutanota.com

Patagonia92@tutanota.com

skynet45@tutanota.com

Starbax@tutanota.com

xzet@tutanota.com

clifieb@tutanota.com

rsa1024@tutanota.com

sherminator.help@tutanota.com

badbusiness@tutanota.de

satco@tutanota.com

Job2019@tutanota.com

rohitramses@tutanota.com

tcprx@tutanota.com

volcano666@tutanota.de

123@tutanota.com

mr.dec@tutanota.com

2BBlacknord@tutanota.com

2Bdfvdv@tutanota.com

2Bhallome@tutanota.com

2Bjakie.nunes@tutanota.com

dfvdv@tutanota.com

jakie.nunes@tutanota.com

hallome@tutanota.com

ClassesBlacknord@tutanota.com

dongeswas@tutanota.co

systems@tutanota.com

szem@tutanota.com

help@tutanota.com

Szems@tutanota.com

Patagonoa92@tutanota.com

Classesjakie.nunes@tutanota.com

Decisivekey@tutanota.com

key.Decisivekey@tutanota.com

Datareesstore@tutanota.com

foxnitro@tutanota.com

MasterLuBu@tutanota.com

nmode@tutanota.com

Classesdfvdv@tutanota.com

akzhq808@tutanota.com.ma

yyuzhou13@tutanota.com

bcpfile17@tutanota.com

xilttbg@tutanota.com

retrnyoufiles@tutanota.com

24H@tutanota.com

buddy888@tutanota.com

9ea6e85bd12b@tutanota.com

berserk666@tutanota.com

Ctorsenoria@tutanota.com

timothymandock@tutanota.com

prosoft@tutanota.com

mr.hacker@tutanota.com

kokux@tutanota.com

sebekgrime@tutanota.com

seeyoubro@tutanota.com

dprworkjessiaeye1955@tutanota.com

2.Hariliuios@tutanota.com

luciferenc@tutanota.com

beryl.mclennan@tutanota.de

pvphlp@tutanota.com

ykup@tutanota.com

ad_finem@tutanota.com

AskHeIp@tutanota.com

coding_434@tutanota.com

combo@tutanota.de

biggsurprise@tutanota.com

ochennado@tutanota.com

decodeme666@tutanota.com

decrfile@tutanota.com

bitcoins12@tutanota.com

pr0tector@tutanota.com

grdoks@tutanota.com

StephenJoffe@tutanota.com

adren.kutospov.97@tutanota.com

wang.chang888@tutanota.com

wangteam888@tutanota.com

2048rsa@tutanota.com

AdamBrown89@tutanota.com

Panama777@tutanota.com

afroditateam@tutanota.com

AlanRed@tutanota.com

xser@tutanota.com

artemy75@tutanota.com

juniorwanme@tutanota.com

null_ptr@tutanota.de

heineken@tutanota.io

xzer@tutanota.com

DataRescue@tutanota.com

tommy.sanders@tutanota.com

neverdies@tutanota.com

nekross@tutanota.com

royal_flush@tutanota.com

joker_money@tutanota.com

lafoievologjanini23@tutanota.com

best666decoder@tutanota.com

allback@tutanota.com

JamesBaker78@tutanota.com

recoryfile@tutanota.com

giveyoukey@tutanota.com

Blackmax@tutanota.com

mailnitrom@tutanota.com

Mayth24@tutanota.com

elzmflqxj@tutanota.de

Heeeh98@tutanota.com

paragonia92@tutanota.com

digiworldhack@tutanota.com

dryidik@tutanota.com

adolfhackler@tutanota.com

anatova2@tutanota.com

anatoday@tutanota.com

atomickule@tutanota.com

decodedecode@tutanota.com

managersmaers@tutanota.com

tyrkinovusr@tutanota.com

skgrhk2018@tutanota.com

bit-tray@tutanota.com

kurosaki_ichigo@tutanota.com

Suzumiya_Haruhi@tutanota.com

lelouchlamperouge@tutanota.com

teresa@tutanota.de

merd@tutanota.com

FoxHelp@tutanota.com

WSS911@tutanota.com

marjut65@tutanota.com

rememberggg@tutanota.com

restoreassistant2@tutanota.com

RestorFile@tutanota.com

oken@tutanota.com

btc2018@tutanota.de

m4rk0v@tutanota.de

systems64x@tutanota.com

powerbase@tutanota.com

filesrestore@tutanota.com

ibfosontsing@tutanota.com

MelisaPeterman@tutanota.com

soft2018@tutanota.com

mrromber@tutanota.com

affrontUmerSummers@tutanota.com

xlsx@tutanota.com

e-mail-decisivekey@tutanota.com

e-mail-decrfile@tutanota.com

gorkmork@tutanota.de

decspeed@tutanota.com

filekerk@tutanota.com

Wege.xser@tutanota.com

coinsman@tutanota.com

E-Mail-dryidik@tutanota.com

zeoticus@tutanota.com

SantaGman@tutanota.com

hackerz6924@tutanota.com

JeryDark@tutanota.com

E-Mail-satco@tutanota.com

E-Mail-clifieb@tutanota.com

nordfox@tutanota.com

middleman2020@tutanota.com

Filemgr@tutanota.com

cryptor6@tutanota.com

I'm in a process of contacting Protonmail and Tutanota's abuse teams in terms of shutting down the accounts.

Stay tuned!

Continue reading →